https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2021-27946_MyBB%E6%B0%91%E6%84%8F%E8%AA%BF%E6%9F%A5%E4%B8%AD%E6%8A%95%E7%A5%A8%E6%95%B8%E9%87%8FSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%2Fzh-tw
CVE-2021-27946 MyBB民意調查中投票數量SQL注入漏洞/zh-tw - Revision history
2026-04-11T09:06:36Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2021-27946_MyBB%E6%B0%91%E6%84%8F%E8%AA%BF%E6%9F%A5%E4%B8%AD%E6%8A%95%E7%A5%A8%E6%95%B8%E9%87%8FSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/zh-tw&diff=5823&oldid=prev
Pwnwiki: Created page with "拉到最下面的Moderation Options，選擇move / copy thread"
2021-06-24T02:19:03Z
<p>Created page with "拉到最下面的Moderation Options，選擇move / copy thread"</p>
<p><b>New page</b></p><div><languages /><br />
==影響版本==<br />
<br />
<pre><br />
< 1.8.26<br />
</pre><br />
<br />
==漏洞利用==<br />
<br />
首先創建一個帖子：<br />
<br />
[[File:1.jpg | 500px]]<br />
<br />
接著設置投票:<br />
<br />
[[File:2.jpg | 500px]]<br />
<br />
編輯投票(右下角)<br />
<br />
插入payload：（這裡採用延時注入驗證漏洞）<br />
<br />
<pre><br />
1' and sleep(10) and '<br />
</pre><br />
<br />
[[File:3.jpg | 500px]]<br />
<br />
拉到最下面的Moderation Options，選擇move / copy thread<br />
<br />
[[File:4.jpg | 500px]]<br />
<br />
點擊move/copy thread按鈕，抓包分析,發現成功延時，驗證成功</div>
Pwnwiki