漏洞概要 关注数(24) 关注此漏洞
缺陷编号:wooyun-2015-0102657
漏洞标题:佳音广播电台网站存在漏洞
相关厂商:佳音广播电台
漏洞作者: by:小雨
提交时间:2015-03-24 12:00
修复时间:2015-05-13 00:22
公开时间:2015-05-13 00:22
漏洞类型:SQL注射漏洞
危害等级:高
自评Rank:20
漏洞状态:已交由第三方合作机构(Hitcon台湾互联网漏洞报告平台)处理
漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]
Tags标签: 无
漏洞详情
披露状态:
2015-03-24: 细节已通知厂商并且等待厂商处理中
2015-03-29: 厂商已经确认,细节仅向厂商公开
2015-04-08: 细节向核心白帽子及相关领域专家公开
2015-04-18: 细节向普通白帽子公开
2015-04-28: 细节向实习白帽子公开
2015-05-13: 细节向公众公开
简要描述:
sql注入
详细说明:
http://www.goodnews.org.tw/content.php?id=51092
sql注入
漏洞证明:
Database: choir
[19 tables]
+---------------------------------------+
| a |
| admins |
| album_post |
| album_type |
| blog_post |
| blog_reply |
| blog_type |
| counter_log |
| faculty_post |
| faculty_type |
| history_post |
| history_type |
| marquee_post |
| marquee_type |
| member |
| news_post |
| news_type |
| show_post |
| show_type |
+---------------------------------------+
Database: goodnews
[85 tables]
+---------------------------------------+
| admins |
| admins_log |
| areacode |
| banner |
| banner_type |
| broadcast |
| broadcast_log |
| common_label |
| content |
| content_group |
| content_group_hex |
| content_keyword |
| content_log_action |
| content_log_factory |
| content_log_library |
| content_log_message |
| content_log_music |
| content_log_musicnews |
| content_log_news |
| content_log_program |
| content_log_publish |
| content_log_song |
| content_log_story |
| content_log_website |
| content_top |
| content_type_action |
| content_type_common |
| content_type_factory |
| content_type_host |
| content_type_magazine |
| content_type_message |
| content_type_music |
| content_type_news |
| content_type_program |
| content_type_promotion |
| content_type_publish |
| content_type_story |
| content_type_website |
| epaper |
| epaper_order |
| epaper_queue |
| epaper_type |
| faqs |
| faqs_type |
| forum |
| forum_group |
| forum_group_type |
| forum_post |
| forum_post_type |
| forum_reply |
| forum_vote |
| host |
| host_log |
| library_member |
| library_member_log |
| library_music |
| library_music_borrow |
| library_music_borrow_log |
| library_music_expand_log |
| library_music_log |
| library_music_song |
| library_music_type |
| live |
| marquee |
| marquee_log |
| marquee_type |
| member |
| member_country |
| member_education |
| member_identity |
| member_interest |
| member_log |
| member_notice |
| member_question |
| member_religion |
| member_response |
| member_type |
| menu_group |
| repost_type |
| security_images |
| website |
| website_counter |
| website_log_ccm |
| website_log_classic |
| website_type |
+---------------------------------------+
Database: information_schema
[28 tables]
+---------------------------------------+
| CHARACTER_SETS |
| COLLATIONS |
| COLLATION_CHARACTER_SET_APPLICABILITY |
| COLUMNS |
| COLUMN_PRIVILEGES |
| ENGINES |
| EVENTS |
| FILES |
| GLOBAL_STATUS |
| GLOBAL_VARIABLES |
| KEY_COLUMN_USAGE |
| PARTITIONS |
| PLUGINS |
| PROCESSLIST |
| PROFILING |
| REFERENTIAL_CONSTRAINTS |
| ROUTINES |
| SCHEMATA |
| SCHEMA_PRIVILEGES |
| SESSION_STATUS |
| SESSION_VARIABLES |
| STATISTICS |
| TABLES |
| TABLE_CONSTRAINTS |
| TABLE_PRIVILEGES |
| TRIGGERS |
| USER_PRIVILEGES |
| VIEWS |
+---------------------------------------+
Database: mysql
[24 tables]
+---------------------------------------+
| user |
| columns_priv |
| darkmoon |
| db |
| event |
| func |
| general_log |
| help_category |
| help_keyword |
| help_relation |
| help_topic |
| host |
| ndb_binlog_index |
| plugin |
| proc |
| procs_priv |
| servers |
| slow_log |
| tables_priv |
| time_zone |
| time_zone_leap_second |
| time_zone_name |
| time_zone_transition |
| time_zone_transition_type |
+---------------------------------------+
修复方案:
版权声明:转载请注明来源 by:小雨@乌云
漏洞回应
厂商回应:
危害等级:高
漏洞Rank:20
确认时间:2015-03-29 00:21
厂商回复:
current user: 'root@localhost'
感謝通報
最新状态:
暂无