乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-12-25: 细节已通知厂商并且等待厂商处理中 2015-12-29: 厂商已经确认,细节仅向厂商公开 2016-01-08: 细节向核心白帽子及相关领域专家公开 2016-01-18: 细节向普通白帽子公开 2016-01-28: 细节向实习白帽子公开 2016-02-09: 细节向公众公开
RT
POST /wssw/Controller?SID=zhcx.ssxxcx.nsrzg.request HTTP/1.1Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*Referer: http://**.**.**.**/wssw/jsp/zhcx/ssxxcx/nsrzg_001.jspAccept-Language: zh-CNUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media CenterPC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateHost: **.**.**.**Content-Length: 31Pragma: no-cacheCookie: JSESSIONID=W3WBhfWLGVNT1Vwr72M8YkGwrvSFDDKhRH6F22N62HXktT9QYn9P!-1708605888; _gscu_347274139=50622185lm2w1858; _gscbrs_347274139=1; wsswCookie=W3gjgVFqBvCGQ9mxv5JTN4tyHfYv9Js84zgcQdP6mLDgLGHtYzfH!-1449532359nsrsbh=12341234&nsrmc=124312124
POST /wssw/Controller?SID=zhcx.ssxxcx.swdj.request HTTP/1.1Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*Referer: http://**.**.**.**/wssw/jsp/zhcx/ssxxcx/swdj_001.jspAccept-Language: zh-CNUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateHost: **.**.**.**Content-Length: 33Pragma: no-cacheCookie: wsswCookie=W3PQmngnyDpRNlwLxZSy2D3nqGFx0lWG2h3RKZqXn5xGnNJKlrGn!-1449532359; JSESSIONID=W3PznLfqwzpyV28SZ3WwDKBvTBx2TRNNZlbQmDBJhGGg2pkVT4vs!-1651410409; _gscu_347274139=50622185lm2w1858; _gscs_347274139=t50676826gd65wk58|pv:1; _gscbrs_347274139=1nsrsbh=1232134&nsrmc=213412342134
POST /wssw/Controller?SID=zhcx.ssxxcx.qscx.request HTTP/1.1Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*Referer: http://**.**.**.**/wssw/jsp/zhcx/ssxxcx/qscx_001.jspAccept-Language: zh-CNUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)Content-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateHost: **.**.**.**Content-Length: 85Pragma: no-cacheCookie: wsswCookie=W3PQmngnyDpRNlwLxZSy2D3nqGFx0lWG2h3RKZqXn5xGnNJKlrGn!-1449532359; JSESSIONID=W3PznLfqwzpyV28SZ3WwDKBvTBx2TRNNZlbQmDBJhGGg2pkVT4vs!-1651410409; _gscu_347274139=50622185lm2w1858; _gscs_347274139=t50676826gd65wk58|pv:1; _gscbrs_347274139=1nsrsbh=32413214&pg=1&last=5&first=1&nsrmc=1234321&pg=1&last=5&first=1&swjgmc=43213412
危害等级:高
漏洞Rank:10
确认时间:2015-12-29 17:04
CNVD确认所述漏洞情况,已经转由CNCERT下发江西分中心,由其后续协调网站管理单位处置。
暂无