我还以为是提款机的漏洞

--- 09年8月1日,周六, ring04h <[email protected]> 写道:

发件人: ring04h <[email protected]>
主题: [Ph4nt0m] Re: PW银行爆刷钱漏洞
收件人: [email protected]
日期: 2009年8月1日,周六,下午11:07

存入银行一块钱,然后取钱
取钱的数值设置为: 
0.99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999

无数个9, 这样就可以利用了。


2009/8/1 Rinima! <[email protected]>


DZ插件也有不少漏洞呢。
这个银行刷了能做什么啊。。又不能换人民币。。


2009/7/28 LIN <[email protected]>


紧急:PW银行爆刷钱漏洞,附补丁 (6.3.2/7.x)  -- 07月26日
http://www.phpwind.net/read-htm-tid-830532-page-1.html

bug描述:
因MySQL在自动转换整型数值时存在溢出,导致会员可利用银行插件提交恶意数据而进行刷积分。


有谁知道怎么利用吗?


-- 
欢迎光临:http://www.rinima.com 









      ___________________________________________________________ 
  好玩贺卡等你发,邮箱贺卡全新上线! 
http://card.mail.cn.yahoo.com/
--~--~---------~--~----~------------~-------~--~----~
 要向邮件组发送邮件,请发到 [email protected]
 要退订此邮件,请发邮件至 [email protected]
-~----------~----~----~----~------~----~------~--~---

回复