当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0102657

漏洞标题:佳音广播电台网站存在漏洞

相关厂商:佳音广播电台

漏洞作者: by:小雨

提交时间:2015-03-24 12:00

修复时间:2015-05-13 00:22

公开时间:2015-05-13 00:22

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:20

漏洞状态:已交由第三方合作机构(Hitcon台湾互联网漏洞报告平台)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-03-24: 细节已通知厂商并且等待厂商处理中
2015-03-29: 厂商已经确认,细节仅向厂商公开
2015-04-08: 细节向核心白帽子及相关领域专家公开
2015-04-18: 细节向普通白帽子公开
2015-04-28: 细节向实习白帽子公开
2015-05-13: 细节向公众公开

简要描述:

sql注入

详细说明:

http://www.goodnews.org.tw/content.php?id=51092
sql注入

漏洞证明:

Database: choir
[19 tables]
+---------------------------------------+
| a |
| admins |
| album_post |
| album_type |
| blog_post |
| blog_reply |
| blog_type |
| counter_log |
| faculty_post |
| faculty_type |
| history_post |
| history_type |
| marquee_post |
| marquee_type |
| member |
| news_post |
| news_type |
| show_post |
| show_type |
+---------------------------------------+
Database: goodnews
[85 tables]
+---------------------------------------+
| admins |
| admins_log |
| areacode |
| banner |
| banner_type |
| broadcast |
| broadcast_log |
| common_label |
| content |
| content_group |
| content_group_hex |
| content_keyword |
| content_log_action |
| content_log_factory |
| content_log_library |
| content_log_message |
| content_log_music |
| content_log_musicnews |
| content_log_news |
| content_log_program |
| content_log_publish |
| content_log_song |
| content_log_story |
| content_log_website |
| content_top |
| content_type_action |
| content_type_common |
| content_type_factory |
| content_type_host |
| content_type_magazine |
| content_type_message |
| content_type_music |
| content_type_news |
| content_type_program |
| content_type_promotion |
| content_type_publish |
| content_type_story |
| content_type_website |
| epaper |
| epaper_order |
| epaper_queue |
| epaper_type |
| faqs |
| faqs_type |
| forum |
| forum_group |
| forum_group_type |
| forum_post |
| forum_post_type |
| forum_reply |
| forum_vote |
| host |
| host_log |
| library_member |
| library_member_log |
| library_music |
| library_music_borrow |
| library_music_borrow_log |
| library_music_expand_log |
| library_music_log |
| library_music_song |
| library_music_type |
| live |
| marquee |
| marquee_log |
| marquee_type |
| member |
| member_country |
| member_education |
| member_identity |
| member_interest |
| member_log |
| member_notice |
| member_question |
| member_religion |
| member_response |
| member_type |
| menu_group |
| repost_type |
| security_images |
| website |
| website_counter |
| website_log_ccm |
| website_log_classic |
| website_type |
+---------------------------------------+
Database: information_schema
[28 tables]
+---------------------------------------+
| CHARACTER_SETS |
| COLLATIONS |
| COLLATION_CHARACTER_SET_APPLICABILITY |
| COLUMNS |
| COLUMN_PRIVILEGES |
| ENGINES |
| EVENTS |
| FILES |
| GLOBAL_STATUS |
| GLOBAL_VARIABLES |
| KEY_COLUMN_USAGE |
| PARTITIONS |
| PLUGINS |
| PROCESSLIST |
| PROFILING |
| REFERENTIAL_CONSTRAINTS |
| ROUTINES |
| SCHEMATA |
| SCHEMA_PRIVILEGES |
| SESSION_STATUS |
| SESSION_VARIABLES |
| STATISTICS |
| TABLES |
| TABLE_CONSTRAINTS |
| TABLE_PRIVILEGES |
| TRIGGERS |
| USER_PRIVILEGES |
| VIEWS |
+---------------------------------------+
Database: mysql
[24 tables]
+---------------------------------------+
| user |
| columns_priv |
| darkmoon |
| db |
| event |
| func |
| general_log |
| help_category |
| help_keyword |
| help_relation |
| help_topic |
| host |
| ndb_binlog_index |
| plugin |
| proc |
| procs_priv |
| servers |
| slow_log |
| tables_priv |
| time_zone |
| time_zone_leap_second |
| time_zone_name |
| time_zone_transition |
| time_zone_transition_type |
+---------------------------------------+

修复方案:

版权声明:转载请注明来源 by:小雨@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:20

确认时间:2015-03-29 00:21

厂商回复:

current user: 'root@localhost'
感謝通報

最新状态:

暂无