漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2016-0169672
漏洞标题：酷6网某登录位置可绕过验证码进行大规模撞库
相关厂商：酷6网
漏洞作者： 路人甲
提交时间：2016-01-13 19:25
修复时间：2016-02-27 11:49
公开时间：2016-02-27 11:49
漏洞类型：设计缺陷/逻辑错误
危害等级：低
自评Rank：5
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2016-01-13： 细节已通知厂商并且等待厂商处理中
2016-01-14： 厂商已经确认，细节仅向厂商公开
2016-01-24： 细节向核心白帽子及相关领域专家公开
2016-02-03： 细节向普通白帽子公开
2016-02-13： 细节向实习白帽子公开
2016-02-27： 细节向公众公开
简要描述：
酷6网某登录位置可绕过验证码进行大规模撞库
详细说明：
主站登录位置http://passport.ku6.com/v3-login.htm?redirect=http%3A%2F%2Fv.ku6.com%2Flogin有验证码但是可以绕过，就是抓包之后输入正确一直就会正确，用户名密码均明文传输的：
然后测试撞库用户，酷6属于比较大的网站，可以进行大规模撞库，出来了很多用户，这里列举一部分吧：
登录主站证明：
漏洞证明：
主站登录位置http://passport.ku6.com/v3-login.htm?redirect=http%3A%2F%2Fv.ku6.com%2Flogin有验证码但是可以绕过，就是抓包之后输入正确一直就会正确，用户名密码均明文传输的：
然后测试撞库用户，酷6属于比较大的网站，可以进行大规模撞库，出来了很多用户，这里列举一部分吧：
[email protected] lizheng 1979
[email protected] 8219525 1979
[email protected] 66679046 1979
[email protected] 373692994 1979
[email protected] lwf901226 1979
[email protected] 123456 1979
[email protected] yuanmeng1234 1979
[email protected] 8259068 1979
[email protected] 19900315r 1980
[email protected] 123456free 1980
[email protected] 419603169 1980
[email protected] 83261172 1980
[email protected] 83261172 1980
[email protected] 123456 1980
[email protected] 3011106207 1980
[email protected] 520520 1980
[email protected] 19870521 1980
[email protected] 198781 1981
[email protected] 198717 1981
[email protected] wasd321 1981
[email protected] 961106lc 1981
[email protected] 5235480477 1981
[email protected] 13472255206 1981
[email protected] 19893361 1981
[email protected] a3930988 1981
[email protected] 19860305 1981
[email protected] 19761103 1981
[email protected] 4035066005 1981
[email protected] 4035066005 1981
[email protected] 223600 1981
[email protected] jack1981 1981
[email protected] 159621 1982
[email protected] 159621 1982
[email protected] duoduo 1982
[email protected] 5201314159 1982
[email protected] wangsisi 1982
[email protected] xu111111 1982
[email protected] 131623 1982
[email protected] tuyangyang 1982
[email protected] 103431 1982
[email protected] 19891008 1982
[email protected] 421087 1982
[email protected] quge860510 1982
[email protected] 19861214 1982
[email protected] 1381432573 1982
[email protected] huuhuang 1982
[email protected] 50332440 1983
[email protected] 5481767 1983
[email protected] 1234567 1983
[email protected] zhangjian 1983
[email protected] 920620 1983
[email protected] 131999 1983
[email protected] 1989521 1983
[email protected] 13703419508 1983
[email protected] 780712 1983
[email protected] 870629 1983
[email protected] 870629 1983
[email protected] 891001 1983
[email protected] 13698360863 1984
[email protected] 7533282 1984
[email protected] 13932201345 1984
[email protected] ty012358 1984
[email protected] 19870412 1984
[email protected] nvslgogo 1985
[email protected] 1230123 1985
[email protected] 111111 1985
[email protected] 7811492 1985
[email protected] 563021 1985
[email protected] 563021 1985
[email protected] 563021 1985
[email protected] 563021 1985
[email protected] 563021 1985
[email protected] 563021 1985
[email protected] 2833816ac 1985
[email protected] 123456 1985
[email protected] 123456 1986
[email protected] zz8839642 1986
[email protected] cssccssc 1986
[email protected] 888168 1986
[email protected] 455300242 1986
[email protected] 8561163 1986
[email protected] 19801001 1986
[email protected] 817128 1986
[email protected] 19880518 1986
[email protected] GAOXU00 1987
[email protected] yjx111922 1987
[email protected] 86868068 1987
[email protected] 198663 1987
[email protected] 19881230 1988
[email protected] 123456aaa 1988
[email protected] 19900726 1988
[email protected] 31635476 1988
[email protected] 774566 1988
[email protected] 910417z 1988
[email protected] lishijie220 1988
[email protected] 891101 1988
[email protected] 851023 1988
[email protected] yuanmeng97 1989
[email protected] 5136098118 1989
[email protected] 475821 1989
[email protected] 19940901 1989
[email protected] 250029521 1989
[email protected] 7758521 1989
[email protected] w....... 1989
[email protected] 7911996 1989
[email protected] 127104 1989
[email protected] 35476710 1989
[email protected] woaili 1989
[email protected] zzl910609 1989
[email protected] z0419t 1989
[email protected] 801098 1989
[email protected] enzo19890715 1989
[email protected] 721290 1989
[email protected] yexiaoyuo 1990
[email protected] 9504891 1990
[email protected] 15998550975 1990
[email protected] 6822160 1990
[email protected] tengfei 1990
[email protected] djthy1314 1990
[email protected] 3515448 1990
[email protected] 8912110528 1990
[email protected] 88485872 1991
[email protected] 57496221 1991
[email protected] 57496221 1991
[email protected] 850707 1991
[email protected] yhy821105 1992
[email protected] 891124 1992
[email protected] 4514279 1992
[email protected] xiangni122 1992
[email protected] 1994915 1992
[email protected] 6442159 1992
[email protected] 7221213 1992
[email protected] 62753320 1992
[email protected] abcd12345678 1992
[email protected] 900217 1992
[email protected] 4513581 1993
[email protected] 444444 1993
[email protected] 123456 1993
[email protected] 67771586 1993
[email protected] 198195 1993
[email protected] 3313575 1993
[email protected] 64669219 1993
[email protected] qt9757972 1993
[email protected] 8370839 1993
[email protected] 19911217 1994
[email protected] 886688 1994
[email protected] 19860214 1994
[email protected] 123456 1994
[email protected] 198414 1994
[email protected] 241231 1995
[email protected] 1988312 1995
[email protected] 6151688 1995
[email protected] zxc123 1995
[email protected] 33663996 1995
[email protected] 19910912 1995
[email protected] 13912035024 1995
[email protected] 13882467572 1995
[email protected] 779828520 1995
[email protected] 6439398 1995
[email protected] a1989163 1995
[email protected] 5872819qq 1996
[email protected] 19900115 1996
[email protected] 19891022 1996
[email protected] tongkai 1996
[email protected] 2308115 1996
[email protected] 456584520 1996
[email protected] 456584520 1996
[email protected] 123456789 1997
[email protected] 1234567899 1997
[email protected] 951753 1997
[email protected] 1208286 1997
[email protected] xushi123 1997
[email protected] pw19512207 1997
[email protected] 911119 1997
[email protected] niesen 1997
[email protected] 7327996 1997
[email protected] a138760 1997
[email protected] 7850539 1997
[email protected] 13781185761 1998
[email protected] 16944559 1998
[email protected] 773269448 1998
[email protected] 3.1415926 1998
[email protected] 1369130 1998
[email protected] jihuanjue 1998
[email protected] 13873424685 1998
[email protected] 22951512 1998
[email protected] fhqilwfnh 1998
[email protected] 880130 1998
[email protected] xiaoxue 1998
[email protected] 123014 1998
[email protected] 81561586 1998
[email protected] 19831016 1998
[email protected] 513200 1998
[email protected] 13873424685 1998
[email protected] 7758521 1999
[email protected] 19900510 1999
[email protected] 3692366 1999
[email protected] zhou214231 2000
[email protected] 1270065095 2000
[email protected] 2688128 2000
[email protected] 999888 2000
[email protected] liu6480832 2000
[email protected] 33443344 2000
[email protected] 13711009430 2000
[email protected] 83745575 2001
[email protected] 123.123 2001
[email protected] 8838725 2001
[email protected] 3558638 2001
[email protected] 898989 2001
[email protected] 78184845 2001
[email protected] zhanghaoran 2001
[email protected] yanbin 2001
[email protected] 654421472 2001
[email protected] 5201314 2001
[email protected] 19931217 2001
[email protected] 5201314 2001
[email protected] 5201314 2001
[email protected] 5201314 2001
[email protected] shenwenbing 2001
[email protected] smfy1118 2001
[email protected] andy830812 2002
[email protected] 8855389 2002
[email protected] 138722085 2003
[email protected] 76681801 2003
[email protected] cks952211 2004
[email protected] yusayusa 2004
[email protected] 521521 2004
[email protected] 2676677 2004
[email protected] ryohazuki 2004
[email protected] lqf1988 2004
[email protected] 521521 2004
[email protected] 13634911674 2004
[email protected] 82491672a 2005
[email protected] 2030626 2005
[email protected] 1983430fan 2006
[email protected] 2139774109 2006
[email protected] samsky521 2006
[email protected] samsky521 2006
[email protected] samsky521 2006
[email protected] samsky521 2006
[email protected] samsky521 2006
[email protected] 2361285 2006
[email protected] 4405081984 2007
[email protected] 4405081984 2007
[email protected] 741236 2007
[email protected] shenhua 2007
[email protected] ttkx2222 2007
[email protected] heroxiong 2007
[email protected] heroxiong 2007
[email protected] 880714 2007
[email protected] jun3243770 2007
[email protected] lgy731 2007
[email protected] 5201314 2008
[email protected] gsd123 2008
[email protected] 9898000 2008
[email protected] wuchanghai 2008
[email protected] 2008208 2008
[email protected] 477278 2008
[email protected] 495596323 2010
[email protected] 9929462995 2010
[email protected] 522425300 2010
[email protected] 730328 2010
[email protected] 375147521 2010
[email protected] 594henry 2010
[email protected] 1436388 2010
[email protected] 19841109 2010
[email protected] 375147521 2010
[email protected] 272131321 2010
[email protected] 6817665 2010
[email protected] zhang6878 2010
[email protected] zhang6878 2010
[email protected] 19841008 2011
[email protected] 502087385 2011
[email protected] 522522 2012
[email protected] 19881114 2012
[email protected] 1240352703 2013
[email protected] 13514546780 2013
[email protected] 496962289 2013
[email protected] 58789060 2013
[email protected] 2237809 2013
[email protected] 464458312 2013
[email protected] 8869389 2014
[email protected] 1096311715 2014
[email protected] 819920 2014
[email protected] 322985 2015
[email protected] 322985 2015
[email protected] zhangjunzhi 2015
[email protected] 754257547 2015
[email protected] 312093705 2016
[email protected] han1984 2016
[email protected] bakinba 2016
[email protected] chenzj1017 2016
[email protected] ww6812317 2017
[email protected] 93754695683 2017
[email protected] 99247273 2017
[email protected] 5234692 2017
[email protected] 56283128 2018
[email protected] 13847385050 2018
[email protected] 1356125 2018
[email protected] xf2006917 2018
[email protected] 303184054 2018
[email protected] 512764892 2019
[email protected] 19891206 2019
[email protected] 67757855 2019
[email protected] xujiasen27 2019
[email protected] a5032239 2019
[email protected] 12597758 2019
[email protected] 13005051099 2019
[email protected] 512250999 2019
[email protected] 4226326s 2019
[email protected] 19891128 2020
[email protected] 119267 2020
[email protected] 398500740 2020
[email protected] gzbz88 2020
[email protected] woshikht 2020
[email protected] 58780504 2020
[email protected] 870530 2021
[email protected] 19881214 2021
[email protected] 870530 2021
[email protected] 7102025 2021
[email protected] 362635344 2021
[email protected] 15062323176 2021
[email protected] 123456 2022
[email protected] 231622567 2023
[email protected] yanyan0311 2023
[email protected] guo12310315 2023
[email protected] jiqimao 2023
[email protected] 5122698743 2024
[email protected] woshidmm 2024
[email protected] 11396565 2025
[email protected] 198753z 2025
[email protected] wyrenzhen 2025
[email protected] 999888 2025
[email protected] 3120215 2026
[email protected] 3120215 2026
[email protected] 709394liu 2026
[email protected] ljw19880304 2026
[email protected] 890222 2027
[email protected] 123123 2027
[email protected] 14230173 2027
[email protected] laopo520 2027
[email protected] 13734572166 2027
[email protected] g19899290 2028
[email protected] niubi74110 2028
[email protected] 313428 2028
[email protected] 281986 2028
[email protected] 7758520 2028
[email protected] zuizhong96 2028
[email protected] 13324849369 2028
[email protected] wjl19850503 2028
[email protected] 88129901 2028
[email protected] 642539 2028
[email protected] 520153 2029
[email protected] 84550919 2029
[email protected] 674013183 2030
[email protected] 58950521 2030
[email protected] 19870325 2030
[email protected] 1235896 2031
[email protected] 3201041981 2031
[email protected] syjqwy60 2031
[email protected] 33221100 2031
[email protected] 13631353066 2031
[email protected] 5529005 2031
[email protected] 198953 2032
[email protected] 123456 2032
[email protected] xcjsdybds 2032
[email protected] xx4214035 2033
[email protected] 8534345 2033
[email protected] 2810059 2033
[email protected] 61569250 2034
[email protected] 15319810998 2034
[email protected] 550837286 2034
[email protected] 111111 2035
[email protected] zhsh127 2035
[email protected] 5201314 2036
[email protected] 88985399 2036
[email protected] zHousisi 2036
[email protected] aaa123 2036
[email protected] liuchen 2037
[email protected] jiang321347 2038
[email protected] qww8888qww 2038
[email protected] hua910 2038
[email protected] 13514139446 2038
[email protected] 63702064 2039
[email protected] 111111 2039
[email protected] hky10189 2039
[email protected] 210917 2040
[email protected] 8267638 2040
[email protected] 19851015 2040
[email protected] 821129 2040
[email protected] y326630594 2041
[email protected] 963258 2041
[email protected] 111111 2042
[email protected] 3216565351 2042
[email protected] 24166063 2043
[email protected] 7758521 2043
[email protected] a5867410b 2043
[email protected] zyc008668 2043
[email protected] asdzxc 2044
[email protected] asdzxc 2044
[email protected] 15101761575 2044
[email protected] 1333323455 2045
[email protected] break900d 2046
[email protected] 688496 2046
[email protected] 275802079 2046
[email protected] love19880126me 2047
[email protected] 503503503 2048
[email protected] xinzhihu 2048
[email protected] shanzhu 2049
[email protected] 313211313 2049
[email protected] 81810080 2050
[email protected] 325604 2054
[email protected] MUSIC1113 2056
[email protected] maheli 2056
[email protected] 8654230 2057
[email protected] 19890729 2057
[email protected] 547896321 2058
[email protected] 3550556 2061
[email protected] sz19890225 2061
[email protected] 892174208 2071
[email protected] 824655 2071
[email protected] shu521ling 2076
[email protected] maotou 2076
[email protected] 880417 2078
[email protected] 16896866 2080
[email protected] 87535505 2088
[email protected] 5879858 2088
[email protected] 17671581 2090
[email protected] 2345132 2092
[email protected] 969321594 2100
[email protected] 8893848 2115
[email protected] 198778 2129
登录主站证明：
修复方案：
加密
版权声明：转载请注明来源 路人甲@乌云
漏洞回应
厂商回应：
危害等级：低
漏洞Rank：5
确认时间：2016-01-14 08:53
厂商回复：
感谢提出
最新状态：
暂无