当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0122713

漏洞标题:手机网站安全之驰为创新数据库信息泄露

相关厂商:驰为创新

漏洞作者: 路人甲

提交时间:2015-06-25 16:59

修复时间:2015-08-09 17:00

公开时间:2015-08-09 17:00

漏洞类型:敏感信息泄露

危害等级:中

自评Rank:10

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-06-25: 积极联系厂商并且等待厂商认领中,细节不对外公开
2015-08-09: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

RT

详细说明:

http://bbs.chuwi.com/bbs.chuwi.com.zip
数据库信息

// ----------------------------  CONFIG DB  ----------------------------- //
$_config['db']['1']['dbhost'] = 'localhost';
$_config['db']['1']['dbuser'] = 'wwwsh_bbschuwi';
$_config['db']['1']['dbpw'] = 'X4Q6n6e8';
$_config['db']['1']['dbcharset'] = 'utf8';
$_config['db']['1']['pconnect'] = '0';
$_config['db']['1']['dbname'] = 'wwwsh_bbschuwi';
$_config['db']['1']['tablepre'] = 'pre_';
$_config['db']['slave'] = '';
$_config['db']['common']['slave_except_table'] = '';


1.png

2.png


部分信息

1	[email protected]	admin	c9aa371512f57c14f4ae3b233a73ce1b	0	0	0	0	1	1	0	 	1409812483	329	0	 	1	4	0	1	0	1	0
编辑 删除 2 [email protected] vnzgewmp42 4f83708746fcca98cea86979d6af58df 0 0 0 0 0 10 0 1409899969 2 0 9999 0 1 0 0 0 0 0
编辑 删除 3 [email protected] dewlzrkz 5b866b1279d5a7965a0ccf80651b37f4 0 0 0 0 0 10 0 1409900059 2 0 9999 0 1 0 0 0 0 0
编辑 删除 4 [email protected] bdh美7fg9 6bd6262690c8135c3dd86f2aedb84166 0 0 0 0 0 10 0 1409900936 5 0 8 0 2 0 0 0 0 0
编辑 删除 5 [email protected] duxonenv65 9eb144a21040974dfe53b5fc4db518b3 0 0 0 0 0 10 0 1409901279 2 0 9999 0 1 0 0 0 0 0
编辑 删除 6 [email protected] DeshawnHib 05a13c50d1e1a18c08972cfbe07eddb3 0 0 0 0 0 10 0 1409901411 2 0 9999 0 1 0 0 0 0 0
编辑 删除 7 [email protected] ilsgtkr359e 68c3e7ebbfcdcd9e3f0b94e093affdc2 0 0 0 0 0 10 0 1409901716 2 0 9999 0 1 0 0 0 0 0
编辑 删除 8 [email protected] Chesterhug 650905b0afd7e5db2f664f3a1c6f7e88 0 0 0 0 0 10 0 1409901838 2 0 9999 0 1 0 0 0 0 0
编辑 删除 9 [email protected] alicetbz c690c7db1e9d1f968022a6cca3070efc 0 0 0 0 0 10 0 1409901882 2 0 9999 0 1 0 0 0 0 0
编辑 删除 10 [email protected] mrorezita 27751875e7f5a50124f5900fc81c72b4 0 0 0 0 0 10 0 1409902205 37 0 9999 0 1 0 0 0 0 0
编辑 删除 11 [email protected] klhavwka02 d587eca7e694ddf611dd6b5aea6dbab0 0 0 0 0 0 10 0 1409902280 2 0 9999 0 1 0 0 0 0 0
编辑 删除 12 [email protected] nyjdepyd41 c7f171e9c505afdb1dc064abe77b0dfc 0 0 0 0 0 10 0 1409902851 2 0 9999 0 1 0 0 0 0 0
编辑 删除 13 [email protected] ecco_se 54cdcecbd83a89573704fa8b407c731f 0 0 1 0 0 10 0 1409903014 21 0 9999 0 0 0 0 0 0 0
编辑 删除 14 [email protected] yzbhwwer21 3445fbc44fb8083cda76c57a22f35e03 0 0 0 0 0 10 0 1409903974 2 0 9999 0 1 0 0 0 0 0
编辑 删除 15 [email protected] ufsqcnvj02 ac8f792dd48486febceb368bec7b34fe 0 0 0 0 0 10 0 1409904132 2 0 9999 0 1 0 0 0 0 0
编辑 删除 16 [email protected] tcys 43139de0386d5201b1fb656abc7d1c2b 0 0 1 0 0 11 0 1409904444 158 0 9999 0 0 0 0 0 0 0
编辑 删除 17 [email protected] jivepbsa34 c43700700b512ecf4fc76b7cd4e9e33b 0 0 0 0 0 10 0 1409904998 2 0 9999 0 1 0 0 0 0 0
编辑 删除 18 [email protected] sugbjyuo44 44fdac959d19ac1bf32da8369f0ee4db 0 0 0 0 0 10 0 1409905606 2 0 9999 0 1 0 0 0 0 0
编辑 删除 19 [email protected] N003448 6fd4558a1db9a34ae7ece507b1a3e438 0 0 1 0 0 10 0 1409906153 9 0 9999 0 1 0 0 0 0 0
编辑 删除 20 [email protected] jamfanli 4c3295cb94c826f96aff3090fd17888c 0 0 1 0 0 10 0 1409911274 34 0 9999 0 0 0 0 0 0 0
编辑 删除 21 [email protected] jorson b0895b6fafac5bba962a39895b284569 0 0 0 0 0 10 0 1409924568 2 0 9999 0 0 0 0 0 0 0
编辑 删除 22 [email protected] 1715054716 13c6d509b140a69a4c48ad14efabcafd 0 0 0 0 0 10 0 1409924898 2 0 9999 0 1 0 0 0 0 0
编辑 删除 23 [email protected] hengjiu 6aec530bbfbdcd5be89f6aa0b5049d26 0 0 1 0 0 10 0 1409925037 9 0 9999 0 1 0 0 0 0 0
编辑 删除 24 [email protected] 163gff 0be68186146f2adc67b9d1bfa9ff9634 0 0 1 0 0 11 0 1409925548 133 0 9999 0 0 0 0 0 1 0
编辑 删除 25 [email protected] a120977 909c1764eb00ac1d20997d1d0ae404d4 0 0 1 0 0 13 0 1409929410 542 0 9999 0 2 0 0 0 0 0
编辑 删除 26 [email protected] watenuo f336b15581ce1284fa809e2b8b28c24c 0 0 0 0 0 10 0 1409931675 2 0 9999 0 0 0 0 0 0 0
编辑 删除 27 [email protected] 2431220510 a4a04d84c29f370287b74d50540cca19 0 0 0 0 0 10 0 1409967863 4 0 9999 0 0 0 0 0 0 0
编辑 删除 28 [email protected] myk4727633 2873981aea11aa90ea8d11d74290a6cb 0 1 1 0 0 10 0 1409980268 30 0 9999 0 0 0 0 0 1 0
编辑 删除 29 [email protected] 185927977 6a05029699050c663c4437ebe09f6be2 0 0 0 0 0 10 0 1409983030 2 0 9999 0 0 0 0 0 0 0
编辑 删除 30 [email protected] a20120227 540dd998b8310a524f9ffd54958a4672 0 0 0

漏洞证明:

综上

修复方案:

删除! 改密码

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:暂时无回应

漏洞Rank:0

确认时间:2015-06-25 16:59

厂商回复:

最新状态:

暂无