乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2011-05-13: 细节已通知厂商并且等待厂商处理中 2011-05-13: 厂商已经确认,细节仅向厂商公开 2011-05-23: 细节向核心白帽子及相关领域专家公开 2011-06-02: 细节向普通白帽子公开 2011-06-12: 细节向实习白帽子公开 2011-06-12: 细节向公众公开
新浪微博广场测试文件泄露敏感信息
http://weibo.cn/dpool/ttt/test.php
<pre></pre>object(WapMysql)#1 (30) { ["masterLink"]=> bool(false) ["slaveLink"]=> bool(false) ["queryType"]=> string(4) "auto" ["master"]=> array(4) { ["host"]=> string(33) "master.mblog.wap.grid.sina.com.cn" ["port"]=> int(10180) ["user"]=> string(4) "root" ["pass"]=> string(8) "yJE9pfQJ" } ["slave"]=> array(4) { ["host"]=> string(35) "readonly.mblog.wap.grid.sina.com.cn" ["port"]=> int(30180) ["user"]=> string(4) "root" ["pass"]=> string(8) "yJE9pfQJ" } ["masterSlowQueryLog"]=> string(73) "/data1/sinawap/var/logs/wapcommon/ttt/mysql_master_slowquery_20110513.log" ["masterErrorLog"]=> string(69) "/data1/sinawap/var/logs/wapcommon/ttt/mysql_master_error_20110513.log" ["slaveSlowQueryLog"]=> string(72) "/data1/sinawap/var/logs/wapcommon/ttt/mysql_slave_slowquery_20110513.log" ["slaveErrorLog"]=> string(68) "/data1/sinawap/var/logs/wapcommon/ttt/mysql_slave_error_20110513.log" ["host"]=> string(0) "" ["port"]=> string(0) "" ["user"]=> string(0) "" ["passwd"]=> string(0) "" ["pconnect"]=> bool(false) ["newLink"]=> bool(true) ["dbName"]=> string(5) "mblog" ["link"]=> bool(false) ["errno"]=> NULL ["error"]=> NULL ["result"]=> bool(false) ["lastSql"]=> NULL ["logSlowQuery"]=> bool(true) ["slowQueryLog"]=> NULL ["slowQueryTime"]=> int(5) ["encoding"]=> string(4) "UTF8" ["errorLog"]=> NULL ["debug"]=> bool(false) ["debugLog"]=> string(62) "/data1/sinawap/var/logs/wapcommon/ttt/mysql_debug_20110513.log" ["debugInfo"]=> string(514) "2011-05-13 18:25:19host: port: user: dbname:mblogWapMysql->setSlowQueryLog: 设置慢查询日志文件为:/tmp/slow_sql_query.log2011-05-13 18:25:19host: port: user: dbname:mblogWapMysql->setErrorLog: 设置错误日志文件为:/tmp/mysql_error.log2011-05-13 18:25:19host: port: user: dbname:mblogWapMysql->WapMysql: 从库连接配置存在2011-05-13 18:25:19host: port: user: dbname:mblogWapMysql->WapMysql: 主库连接配置存在2011-05-13 18:25:19host: port: user: dbname:mblogWapMysql->WapMysql: 慢查询记录启用,默认时间为5秒" ["lastErr"]=> NULL}<pre></pre>
删除文件~
危害等级:低
漏洞Rank:4
确认时间:2011-05-13 18:32
感谢提供!
暂无