乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-07-22: 细节已通知厂商并且等待厂商处理中 2015-07-24: cncert国家互联网应急中心暂未能联系到相关单位,细节仅向通报机构公开 2015-07-27: 细节向第三方安全合作伙伴开放 2015-09-17: 细节向核心白帽子及相关领域专家公开 2015-09-27: 细节向普通白帽子公开 2015-10-07: 细节向实习白帽子公开 2015-10-22: 细节向公众公开
厂商是: 清华大学教育技术研究所先不说这个用户量是很大的吧:你可以百度搜:欢迎进入网络教学综合平台 或 谷歌搜:THEOL网络教学综合平台多个参数存在SQL注入:
1、/resource/jpk/search.jsp?orderfield=university orderfield参数存在注入2、/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name= university参数、name参数都存在注入
Error:
提示信息: ORA-00911: 无效字符
Case:
A:http://**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=http://**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=http://**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=http://**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=http://**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=0&subject2=709&name=http://**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=http://**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**/resource//jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=http://**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=http://**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**/resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=http://**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=http://**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=http://**.**.**.**//resource/jpk/search.jsp?coursetype=0&applyyear=0&university=&subject1=1&subject2=0&name=B:http://**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**//resource/jpk/search.jsp?orderfield=university**.**.**.**//resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**//resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**//resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**/resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**/resource/jpk/search.jsp?orderfield=university**.**.**.**//resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**//resource/jpk/search.jsp?orderfield=university**.**.**.**//resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**//resource/jpk/search.jsp?orderfield=university**.**.**.**//resource/jpk/search.jsp?orderfield=universityhttp://**.**.**.**//resource/jpk/search.jsp?orderfield=university....more...
Security Testing:
1、university参数证明 2、name参数注入证明: 3、orderfield参数证明
2、name参数注入证明:
3、orderfield参数证明
危害等级:高
漏洞Rank:15
确认时间:2015-07-24 14:34
CNVD确认并复现所述情况,已由CNVD通过软件生产厂商(或网站管理方)公开联系渠道向其邮件通报,由其后续提供解决方案并协调相关用户单位处置。
暂无