Search...

某政府系统一处SQL注入

2015-03-26T00:00:00

ID SSV:94967
Type seebug
Reporter Root
Modified 2015-03-26T00:00:00

Description

简要描述：

详细说明：

山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下： http://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1 http://222.135.76.147:8200/newsymItemManage/Item5.aspx?id=1 http://222.135.127.190:7200/newsymItemManage/Item5.aspx?id=1 http://221.2.149.47:8200/newsymItemManage/Item5.aspx?id=1 http://218.59.205.41:8053/newsymItemManage/Item5.aspx?id=1 http://jwh.tanljgzx.gov.cn/newsymItemManage/Item5.aspx?id=1 http://221.2.171.59:8200/newsymItemManage/Item5.aspx?id=1 http://218.56.159.98:8001/newsymItemManage/Item5.aspx?id=1 http://123.134.189.60:8016/newsymItemManage/Item5.aspx?id=1

漏洞证明：

http://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1

http://218.59.205.41:8053/newsymItemManage/Item5.aspx?id=1

JSON Vulners Source

Initial Source

{"type": "seebug", "lastseen": "2017-11-19T13:06:01", "href": "https://www.seebug.org/vuldb/ssvid-94967", "cvss": {"score": 0.0, "vector": "NONE"}, "modified": "2015-03-26T00:00:00", "reporter": "Root", "description": "### \u7b80\u8981\u63cf\u8ff0\uff1a\n\nRT\n\n### \u8be6\u7ec6\u8bf4\u660e\uff1a\n\n\u5c71\u4e1c\u519c\u53cb\u8f6f\u4ef6\u516c\u53f8\u5b98\u7f51:http://www.nongyou.com.cn/\n\u6848\u4f8b\u5982\u4e0b\uff1a\nhttp://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1\nhttp://222.135.76.147:8200/newsymItemManage/Item5.aspx?id=1\nhttp://222.135.127.190:7200/newsymItemManage/Item5.aspx?id=1\nhttp://221.2.149.47:8200/newsymItemManage/Item5.aspx?id=1\nhttp://218.59.205.41:8053/newsymItemManage/Item5.aspx?id=1\nhttp://jwh.tanljgzx.gov.cn/newsymItemManage/Item5.aspx?id=1\nhttp://221.2.171.59:8200/newsymItemManage/Item5.aspx?id=1\nhttp://218.56.159.98:8001/newsymItemManage/Item5.aspx?id=1\nhttp://123.134.189.60:8016/newsymItemManage/Item5.aspx?id=1\n \n\n### \u6f0f\u6d1e\u8bc1\u660e\uff1a\n\nhttp://61.133.119.187:8091/newsymItemManage/Item5.aspx?id=1\n\n\n[<img src=\"https://images.seebug.org/upload/201503/251710372c3d9af0ed92768aae0b76ad89438fbd.png\" alt=\"QQ\u56fe\u724720150325144601.png\" width=\"600\" onerror=\"javascript:errimg(this);\">](https://images.seebug.org/upload/201503/251710372c3d9af0ed92768aae0b76ad89438fbd.png)\n\n\nhttp://218.59.205.41:8053/newsymItemManage/Item5.aspx?id=1\n\n\n[<img src=\"https://images.seebug.org/upload/201503/2517114387bfeaac10dc3b15641e3514c64eee61.png\" alt=\"QQ\u56fe\u724720150325171141.png\" width=\"600\" onerror=\"javascript:errimg(this);\">](https://images.seebug.org/upload/201503/2517114387bfeaac10dc3b15641e3514c64eee61.png)", "bulletinFamily": "exploit", "references": [], "viewCount": 5, "status": "details", "sourceHref": "", "cvelist": [], "enchantments_done": [], "title": "\u67d0\u653f\u5e9c\u7cfb\u7edf\u4e00\u5904SQL\u6ce8\u5165", "id": "SSV:94967", "sourceData": "", "published": "2015-03-26T00:00:00", "enchantments": {"score": {"value": 0.0, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.0}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645241974}}