漏洞概要
关注数(24)
关注此漏洞
漏洞标题：好老师联盟root权限SQL注入泄漏导致全站122库/近20W用户数据告急
提交时间：2015-08-20 09:07
修复时间：2015-10-04 09:12
公开时间：2015-10-04 09:12
漏洞类型：SQL注射漏洞
危害等级：高
自评Rank：20
漏洞状态：厂商已经确认
Tags标签：
无
漏洞详情
披露状态：
2015-08-20： 细节已通知厂商并且等待厂商处理中
2015-08-20： 厂商已经确认，细节仅向厂商公开
2015-08-30： 细节向核心白帽子及相关领域专家公开
2015-09-09： 细节向普通白帽子公开
2015-09-19： 细节向实习白帽子公开
2015-10-04： 细节向公众公开
简要描述：
RT
详细说明：
漏洞地址：
漏洞证明：
跑了半个月终于把122个数据库表项跑出来了。
<code>
Database: huatongbefoundfcombbak
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| v9_linkage | 3284 |
| v9_template_bak | 483 |
| v9_menu | 343 |
| v9_attachment_index | 179 |
| v9_hits | 152 |
| v9_search | 150 |
| v9_attachment | 136 |
| v9_news_data | 126 |
| v9_news | 123 |
| v9_model_field | 78 |
| v9_category | 77 |
| v9_cache | 28 |
| v9_module | 27 |
| v9_picture | 26 |
| v9_picture_data | 26 |
| v9_position | 16 |
| v9_poster | 10 |
| v9_poster_space | 10 |
| v9_urlrule | 8 |
| v9_member_group | 7 |
| v9_position_data | 7 |
| v9_admin_role | 6 |
| v9_sso_settings | 5 |
| v9_model | 4 |
| v9_type | 4 |
| v9_workflow | 4 |
| v9_member_menu | 3 |
| v9_admin | 2 |
| v9_link | 2 |
| v9_comment_setting | 1 |
| v9_comment_table | 1 |
| v9_datacall | 1 |
| v9_page | 1 |
| v9_site | 1 |
| v9_sso_admin | 1 |
| v9_sso_applications | 1 |
| v9_wap | 1 |
+---------------------------------------+---------+
Database: njlvying.com
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| dede_sys_enum | 3347 |
| dede_erradd | 692 |
| dede_area | 482 |
| dede_sysconfig | 155 |
| dede_arctype | 74 |
| dede_arcmulti | 54 |
| dede_myad | 20 |
| dede_stepselect | 15 |
| dede_scores | 12 |
| dede_plus_changyan_setting | 9 |
| dede_addonarticle | 8 |
| dede_arcatt | 8 |
| dede_archives | 8 |
| dede_arcrank | 8 |
| dede_arctiny | 8 |
| dede_flinktype | 8 |
| dede_sys_module | 7 |
| dede_channeltype | 6 |
| dede_plus | 6 |
| dede_payment | 4 |
| dede_shops_delivery | 4 |
| dede_admintype | 3 |
| dede_co_onepage | 3 |
| dede_flink | 3 |
| dede_moneycard_type | 3 |
| dede_search_keywords | 3 |
| dede_freelist | 2 |
| dede_member_model | 2 |
| dede_member_stowtype | 2 |
| dede_sys_set | 2 |
| dede_admin | 1 |
| dede_downloads | 1 |
| dede_homepageset | 1 |
| dede_member | 1 |
| dede_member_group | 1 |
| dede_member_person | 1 |
| dede_member_space | 1 |
| dede_member_tj | 1 |
| dede_member_type | 1 |
| dede_softconfig | 1 |
| dede_uploads | 1 |
| dede_vote | 1 |
+---------------------------------------+---------+
Database: jr.ydyfudao.com
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| v9_linkage | 3284 |
| v9_template_bak | 1685 |
| v9_hits | 529 |
| v9_search | 529 |
| v9_attachment_index | 467 |
| v9_attachment | 359 |
| v9_news | 350 |
| v9_news_data | 350 |
| v9_menu | 342 |
| v9_category | 322 |
| v9_model_field | 156 |
| v9_page | 120 |
| v9_tele | 90 |
| v9_tele_data | 90 |
| v9_picture | 69 |
| v9_picture_data | 69 |
| v9_form_shanghai | 44 |
| v9_cache | 30 |
| v9_module | 27 |
| v9_block_history | 24 |
| v9_links | 20 |
| v9_links_data | 20 |
| v9_form_toupiao | 19 |
| v9_model | 16 |
| v9_form_guangzhou | 12 |
| v9_vote_option | 12 |
| v9_poster | 10 |
| v9_poster_space | 10 |
| v9_urlrule | 8 |
| v9_member_group | 7 |
| v9_position | 7 |
| v9_admin_role | 6 |
| v9_form_nanjing | 6 |
| v9_sso_settings | 5 |
| v9_type | 5 |
| v9_vote_data | 4 |
| v9_vote_subject | 4 |
| v9_workflow | 4 |
| v9_block | 3 |
| v9_form_shenzhen | 3 |
| v9_member_menu | 3 |
| v9_form_changzhou | 2 |
| v9_form_ningbo | 2 |
| v9_link | 2 |
| v9_admin | 1 |
| v9_comment_setting | 1 |
| v9_comment_table | 1 |
| v9_form_suzhou | 1 |
| v9_form_wuxi | 1 |
| v9_site | 1 |
| v9_sso_admin | 1 |
| v9_sso_applications | 1 |
| v9_wap | 1 |
+---------------------------------------+---------+
Database: bfdly.com_new
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| v9_linkage | 3284 |
| v9_template_bak | 382 |
| v9_menu | 343 |
| v9_hits | 178 |
| v9_search | 178 |
| v9_news | 130 |
| v9_news_data | 130 |
| v9_attachment | 109 |
| v9_attachment_index | 108 |
| v9_category | 86 |
| v9_model_field | 78 |
| v9_picture | 48 |
| v9_picture_data | 48 |
| v9_cache | 27 |
| v9_module | 27 |
| v9_poster | 10 |
| v9_poster_space | 10 |
| v9_position | 8 |
| v9_urlrule | 8 |
| v9_member_group | 7 |
| v9_position_data | 7 |
| v9_admin_role | 6 |
| v9_sso_settings | 5 |
| v9_model | 4 |
| v9_type | 4 |
| v9_workflow | 4 |
| v9_member_menu | 3 |
| v9_admin | 2 |
| v9_link | 2 |
| v9_comment_setting | 1 |
| v9_comment_table | 1 |
| v9_page | 1 |
| v9_site | 1 |
| v9_sso_admin | 1 |
| v9_sso_applications | 1 |
| v9_wap | 1 |
+---------------------------------------+---------+
Database: huatongbefoundfcom
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| v9_linkage | 3284 |
| v9_template_bak | 489 |
| v9_menu | 343 |
| v9_attachment_index | 199 |
| v9_hits | 177 |
| v9_search | 177 |
| v9_attachment | 157 |
| v9_news_data | 133 |
| v9_news | 130 |
| v9_category | 85 |
| v9_model_field | 78 |
| v9_picture | 46 |
| v9_picture_data | 46 |
| v9_cache | 28 |
| v9_module | 27 |
| v9_poster | 10 |
| v9_poster_space | 10 |
| v9_session | 9 |
| v9_urlrule | 8 |
| v9_member_group | 7 |
| v9_position_data | 7 |
| v9_admin_role | 6 |
| v9_sso_settings | 5 |
| v9_model | 4 |
| v9_type | 4 |
| v9_workflow | 4 |
| v9_member_menu | 3 |
| v9_admin | 2 |
| v9_comment_setting | 1 |
| v9_comment_table | 1 |
| v9_datacall | 1 |
| v9_page | 1 |
| v9_position | 1 |
| v9_site | 1 |
| v9_sso_admin | 1 |
| v9_sso_applications | 1 |
| v9_times | 1 |
| v9_wap | 1 |
+---------------------------------------+---------+
Database: ruisiyingyu.com
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| v9_linkage | 3284 |
| v9_log | 694 |
| v9_menu | 333 |
| v9_model_field | 130 |
| v9_cache | 30 |
| v9_module | 26 |
| v9_attachment_index | 11 |
| v9_search | 11 |
| v9_poster | 10 |
| v9_poster_space | 10 |
| v9_hits | 9 |
| v9_type | 9 |
| v9_category | 8 |
| v9_keyword_data | 8 |
| v9_urlrule | 8 |
| v9_keyword | 7 |
| v9_member_group | 7 |
| v9_admin_role | 6 |
| v9_model | 6 |
| v9_news | 5 |
| v9_news_data | 5 |
| v9_sso_settings | 5 |
| v9_page | 4 |
| v9_workflow | 4 |
| v9_member_menu | 3 |
| v9_position_data | 3 |
| v9_attachment | 2 |
| v9_link | 2 |
| v9_admin | 1 |
| v9_comment_setting | 1 |
| v9_comment_table | 1 |
| v9_position | 1 |
| v9_site | 1 |
| v9_sso_admin | 1 |
| v9_sso_applications | 1 |
+---------------------------------------+---------+
Database: myytxueda
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| dede_sys_enum | 3347 |
| dede_area | 482 |
| dede_erradd | 310 |
| dede_addonarticle | 199 |
| dede_archives | 199 |
| dede_arctiny | 199 |
| dede_sysconfig | 153 |
| dede_myad | 20 |
| dede_stepselect | 15 |
| dede_scores | 12 |
| dede_arcatt | 8 |
| dede_arcrank | 8 |
| dede_flinktype | 8 |
| dede_plus | 7 |
| dede_channeltype | 6 |
| dede_sys_module | 6 |
| dede_arctype | 5 |
| dede_search_keywords | 5 |
| dede_payment | 4 |
| dede_shops_delivery | 4 |
| de
修复方案：
版权声明：转载请注明来源 路人甲@乌云
漏洞回应
厂商回应：
危害等级：高
漏洞Rank：20
确认时间：2015-08-20 09:11
厂商回复：
sql注入
最新状态：
暂无
漏洞评价：
评论
-
2015-07-31 11:36 |
f4ckbaidu ( 普通白帽子 | Rank:182 漏洞数:23 | 开发真是日了狗了)
