Scan 360 regular: INSERT \ \ s + INTO +? values

Mysql actually not only can use the insert values into XXX insert data, you can also: insert into the set XXX xx=

Submit:

http://localhost/360.php? SQL=insert into user (user, pass) values (' admin ', '123456')

2

submit set syntax:

http://localhost/360.php? SQL=insert into user set user='admin', pass='123456'

1

repair methods, of course, it is best to add the set.


This concludes the body part