当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2014-057318

漏洞标题：tom手机娱乐被入侵

相关厂商：TOM在线

漏洞作者： 路人甲

提交时间：2014-04-16 18:11

修复时间：2014-04-21 18:12

公开时间：2014-04-21 18:12

漏洞类型：成功的入侵事件

危害等级：低

自评Rank：1

漏洞状态：漏洞已经通知厂商但是厂商忽略漏洞

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2014-04-16： 细节已通知厂商并且等待厂商处理中
2014-04-21： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

详细说明：

不做死就不会死
http://sms.tom.com/

漏洞证明：

1.jpg

2.jpg

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：无影响厂商忽略

忽略时间：2014-04-21 18:12

厂商回复：

最新状态：

暂无

漏洞评价：

评论

  1. 2014-04-22 23:51 | 小龙 ( 普通白帽子 | Rank:1208 漏洞数:316 | 乌云有着这么一群人，在乌云学技术，去某数...)

    来自_[2.txt]_Datas 内容: (2576, '鍐嶃€併€佽銆佸皯骞�', 'ab3ab56d5ac3dcbddcaf8e99f593a649', '', '805336837@qq.com', -1, 8, '', '', 0, 1342097252, '', '', '', '', '', '', '', '', '', '', '0000-00-00', '', 1, '', '', '', 0, 0, '', '0', 1, '', '', '', 1024, '', '', '', 120223, 0, 1),来自_[honkerbase红客.sql]_Datas 内容: INSERT INTO `celeste_user` VALUES ('428', 'q805336837', '123321', '805336837@qq.com', '', '', '0', '', '', '', '', '0000-00-00', '', '32', '32', '', '0', '2010-05-23', '0', '0', '1', '1', '4', '1', '1', '1', '1', '1', '0', '1', '1', '1', '0', '0');来自_[www.csdn.net.sql]_Datas 内容: q630818895 # wsxzaq123 # 805336837@qq.com来自_[mail.txt]_Datas 内容: q805336837 f945dbab040ee85316b65564cec07554 805336837@qq.com来自_[mail.txt]_Datas 内容: 陈交锋 938f5e483d1e643d7c5bf7bf5c7a602a 805336837@qq.com来自_[mail.txt]_Datas 内容: 死神网络 c7b680b78a0782697e5e66ad21c24bcc 805336837@qq.com来自_[.sql]_Datas 内容: INSERT INTO chn_common_member VALUES ('26503','805336837@qq.com','q805336837','1b9e1458c1f34ddf2e09f21f47ae594e','0','1','0','0','-1','5','0','','1307446246','23','0','9999','0','4','0','0','0','1');来自_[.sql]_Datas 内容: (1230, 'q805336837', 'bbfcacc5f07bb9e24889b9da94733c07', '805336837@qq.com', '', '', '122.234.7.7', 1303455830, 0, 0, '65acc9', ''),来自_[~刷砖的！.sql]_Datas 内容: (4711, '805336837@qq.com', 'Wang銆丄n', '82fc5f5af5129c7a71b30baef65191bf', 0, 0, 1, 0, 0, 10, 0, '', 1322414972, 11, 0, '9999', 0, 2, 0, 0, 0, 1, 0),From_[hack8888.com.sql]_Datas Content: INSERT INTO pw_members VALUES ('513','死神','c8837b23ff8aaa8a2dde915473ce0991','','805336837@qq.com','-1','8','','','0','1292069615','','','','','','','','','','','0000-00-00','','1','','','','0','0','','0','3','','','','1024','');From_[hackdark.com.sql]_Datas Content: (1230, 'q805336837', 'bbfcacc5f07bb9e24889b9da94733c07', '805336837@qq.com', '', '', '122.234.7.7', 1303455830, 0, 0, '65acc9', ''),From_[chnlanker.com.sql]_Datas Content: INSERT INTO chn_common_member VALUES ('26503','805336837@qq.com','q805336837','1b9e1458c1f34ddf2e09f21f47ae594e','0','1','0','0','-1','5','0','','1307446246','23','0','9999','0','4','0','0','0','1');From_[huc_me.sql]_Datas Content: INSERT INTO pw_members VALUES ('50369','chenjiaofe','c8837b23ff8aaa8a2dde915473ce0991','1825fb9a5e','805336837@qq.com','-1','8','','5.gif|1|||','0','1284780627','','','','','','','','','','','1950-01-01','','1','0','','','0','0','','0','1','','','','1024','');From_[ys168.com.sql]_Datas Content: yxHacker 123321 805336837@qq.comFrom_[mfhk8.com.sql]_Datas Content: 1940 805336837@qq.com 死神 d45b5ad5ab411a87d28cf1206dc920f7 0 0 0 0 0 10 0 1289297178 8 1 9999 0 2 0 0From_[mfhk8.com.sql]_Datas Content: 11440 15156@qq.com q805336837 26fa1f5d56ad4023492289513b1453f9 0 0 0 0 0 10 0 1300871059 8 0 9999 1 0 0 0From_[database_����.sql]_Datas Content: q805336837 f945dbab040ee85316b65564cec07554 805336837@qq.comFrom_[database_����.sql]_Datas Content: 陈交锋 938f5e483d1e643d7c5bf7bf5c7a602a 805336837@qq.comFrom_[database_����.sql]_Datas Content: 死神网络 c7b680b78a0782697e5e66ad21c24bcc 805336837@qq.comFrom_[zhenai.com_c.sql]_Datas Content: 805336837@qq.com 123321From_[honkerbase.com.sql]_Datas Content: INSERT INTO `celeste_user` VALUES ('428', 'q805336837', '123321', '805336837@qq.com', '', '', '0', '', '', '', '', '0000-00-00', '', '32', '32', '', '0', '2010-05-23', '0', '0', '1', '1', '4', '1', '1', '1', '1', '1', '0', '1', '1', '1', '0', '0');From_[1937cn.com.txt]_Datas Content: 2686 死神 0347308fbe3bc3737e320efa95629e00 805336837@qq.com 114.82.238.127 1344331559 0 0 762d9bFrom_[database_��ʯ�ʳ�.sql]_Datas Content: (4711, '805336837@qq.com', 'Wang、An', '82fc5f5af5129c7a71b30baef65191bf', 0, 0, 1, 0, 0, 10, 0, '', 1322414972, 11, 0, '9999', 0, 2, 0, 0, 0, 1, 0),From_[database_������b.sql]_Datas Content: INSERT INTO pw_members VALUES('78828','q805336837','c8837b23ff8aaa8a2dde915473ce0991','','805336837@qq.com','-1','28','','','0','1284634015','','','','','','','','','','','0000-00-00','','1','','','','0','0','','0','1','','','','1024','','');From_[sh3llc0de.com.sql]_Datas Content: INSERT INTO `pre_ucenter_members` VALUES ('1077', '死神', '11a69acd08df123d1d3b45a04d2734ae', '805336837@qq.com', '', '', '125.118.48.239', '1349762375', '0', '0', '74e152', '');From_[f4ck����.txt]_Datas Content: 小情歌 d2ece98a2bc30d115a4687942d19b782 805336837@qq.com 125.118.48.239 1349698342 605343From_[f4ck����.txt]_Datas Content: q805336837 1662e3829106b408775a5c4b8bea192c q805336837@163.com 125.118.51.196 1352621356 c3167f

  2. 2014-04-22 23:51 | 小龙 ( 普通白帽子 | Rank:1208 漏洞数:316 | 乌云有着这么一群人，在乌云学技术，去某数...)

    @小龙 楼上吊炸天