当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2016-0172160

漏洞标题：腾邦集团某站存在SQL注入漏洞

相关厂商：腾邦集团

漏洞作者： 路人甲

提交时间：2016-01-24 10:24

修复时间：2016-01-29 10:30

公开时间：2016-01-29 10:30

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：14

漏洞状态：漏洞已经通知厂商但是厂商忽略漏洞

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2016-01-24： 细节已通知厂商并且等待厂商处理中
2016-01-29： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

详细说明：

POST /movement.php HTTP/1.1
Content-Length: 221
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: http://www.feiren.com/
Cookie: PHPSESSID=emvek4ofen99o8vb1fhd1c5ic0; userfrom=http%3A%2F%2Fwww.feiren.com; userRequest=a%253A19%253A%257Bs%253A12%253A%2522SearchMethod%2522%253Bs%253A8%253A%2522fromName%2522%253Bs%253A3%253A%2522act%2522%253Bs%253A6%253A%2522search%2522%253Bs%253A2%253A%2522id%2522%253Bs%253A5%253A%252260420%2522%253Bs%253A7%253A%2522mapCity%2522%253Bs%253A4%253A%2522%25B3%25C9%25B6%25BC%2522%253Bs%253A1%253A%2522L%2522%253Bs%253A0%253A%2522%2522%253Bs%253A1%253A%2522H%2522%253Bs%253A3%253A%2522200%2522%253Bs%253A4%253A%2522city%2522%253Bs%253A13%253A%2522San%2BFrancisco%2522%253Bs%253A7%253A%2522brandid%2522%253Bs%253A3%253A%2522484%2522%253Bs%253A7%253A%2522keyword%2522%253Bs%253A23%253A%2522%25BE%25C6%25B5%25EA%25C3%25FB%252F%25B5%25D8%25C3%25FB%252F%25C2%25B7%25C3%25FB%252F%25D0%25D0%25D5%25FE%25C7%25F8%2522%253Bs%253A6%253A%2522submit%2522%253Bs%253A8%253A%2522%25B2%25E9%25D1%25AF%25BE%25C6%25B5%25EA%2522%253Bs%253A4%253A%2522type%2522%253Bs%253A0%253A%2522%2522%253Bs%253A5%253A%2522brand%2522%253Bs%253A0%253A%2522%2522%253Bs%253A10%253A%2522commercial%2522%253Bs%253A0%253A%2522%2522%253Bs%253A8%253A%2522district%2522%253Bs%253A0%253A%2522%2522%253Bs%253A2%253A%2522in%2522%253Bs%253A0%253A%2522%2522%253Bs%253A3%253A%2522out%2522%253Bs%253A0%253A%2522%2522%253Bs%253A5%253A%2522price%2522%253Bs%253A0%253A%2522%2522%253Bs%253A5%253A%2522round%2522%253Bs%253A0%253A%2522%2522%253Bs%253A4%253A%2522star%2522%253Bs%253A0%253A%2522%2522%253B%257D; flight_search_param=YToxMDp7czo0OiJ0eXBlIjtpOjE7czo0OiJmcm9tIjtzOjM6IkNUVSI7czoxNDoiZnJvbV9jaXR5X25hbWUiO3M6NDois8m2vCI7czoyOiJ0byI7czozOiJQRUsiO3M6MTI6InRvX2NpdHlfbmFtZSI7czo0OiKxsb6pIjtzOjU6InN0YXJ0IjtzOjEwOiIyMDE2LTAxLTI0IjtzOjc6ImFpcndheXMiO3M6MDoiIjtzOjU6ImNhYmluIjtzOjA6IiI7czo1OiJjb3VudCI7czowOiIiO3M6Nzoib3JkZXJieSI7czowOiIiO30%3D; flight_order_info=czowOiIiOw%3D%3D; flight_firstFlight=czowOiIiOw%3D%3D; flight_airway_q_cokiee=czowOiIiOw%3D%3D; flight_flight_first_date=czoxMDoiMjAxNi0wMS0yNCI7; my_foot_histry=a%3A14%3A%7Bi%3A23527%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2223527%22%3Bs%3A4%3A%22name%22%3Bs%3A18%3A%22%B9%E3%D6%DD%B0%D9%BB%A8%C9%BD%D7%AF%B6%C8%BC%D9%B4%E5%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_23527%2FThumbnailImg%2F20140224094350114820.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A388%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446689%3B%7Di%3A60440%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2260440%22%3Bs%3A4%3A%22name%22%3Bs%3A26%3A%22%D6%D8%C7%EC%D3%CE%C0%D6%C3%C0%B9%AB%D4%A2%28%C4%CF%C6%BA%D0%AD%D0%C5%B5%EA%29%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_60440%2FThumbnailImg%2F20130527172532595450.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A178%3Bs%3A4%3A%22star%22%3Bs%3A0%3A%22%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446690%3B%7Di%3A23733%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2223733%22%3Bs%3A4%3A%22name%22%3Bs%3A16%3A%22%B9%E3%D6%DD%D2%CB%B0%B2%C9%CC%CE%F1%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_23733%2FThumbnailImg%2F2011070809531608864.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A168%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x3%22+title%3D%22%C8%FD%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446692%3B%7Di%3A13080%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2213080%22%3Bs%3A4%3A%22name%22%3Bs%3A20%3A%22%CC%EC%BD%F2%CD%F2%D4%B4%C1%FA%CB%B3%B6%C8%BC%D9%D7%AF%D4%B0%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_13080%2FThumbnailImg%2F2011070801205794666.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A380%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x3%22+title%3D%22%C8%FD%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446695%3B%7Di%3A59339%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2259339%22%3Bs%3A4%3A%22name%22%3Bs%3A12%3A%22%B3%C9%B6%BC%C0%F1%B6%D9%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_59339%2FThumbnailImg%2F20140428173125102140.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A398%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446708%3B%7Di%3A26664%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2226664%22%3Bs%3A4%3A%22name%22%3Bs%3A16%3A%22%B3%C9%B6%BC%D5%FD%CE%F5%B9%FA%BC%CA%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_26664%2FThumbnailImg%2F20140709160726986730.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A328%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446711%3B%7Di%3A19886%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2219886%22%3Bs%3A4%3A%22name%22%3Bs%3A14%3A%22%CF%C3%C3%C5%CF%B2%C0%B4%B5%C7%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_19886%2FThumbnailImg%2F20140214144046406510.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A1058%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x5%22+title%3D%22%CE%E5%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446721%3B%7Di%3A19842%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2219842%22%3Bs%3A4%3A%22name%22%3Bs%3A18%3A%22%CF%C3%C3%C5%D1%C7%D6%DE%BA%A3%CD%E5%B4%F3%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_19842%2FThumbnailImg%2F2011070813354701283.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A349%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x5%22+title%3D%22%CE%E5%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446726%3B%7Di%3A10845%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2210845%22%3Bs%3A4%3A%22name%22%3Bs%3A32%3A%22%B1%B1%BE%A9%D0%FB%CE%E4%C3%C5%C9%CC%CE%F1%BE%C6%B5%EA%28%D4%AD%D4%BD%D0%E3%B4%F3%B7%B9%B5%EA%29%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_10845%2FThumbnailImg%2F2011070801000929581.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A408%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x3%22+title%3D%22%C8%FD%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446732%3B%7Di%3A10334%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2210334%22%3Bs%3A4%3A%22name%22%3Bs%3A14%3A%22%B1%B1%BE%A9%B8%BB%B6%AB%C9%AD%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_10334%2FThumbnailImg%2F2011041806122319737.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A199%3Bs%3A4%3A%22star%22%3Bs%3A0%3A%22%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446734%3B%7Di%3A12633%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2212633%22%3Bs%3A4%3A%22name%22%3Bs%3A14%3A%22%C9%CF%BA%A3%CD%A8%C3%AF%B4%F3%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_12633%2FThumbnailImg%2F2011070811395314371.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A608%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453446751%3B%7Di%3A58229%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2258229%22%3Bs%3A4%3A%22name%22%3Bs%3A22%3A%22%B9%E3%D6%DD%B4%F3%CF%C3%B0%D7%D4%C6%C9%BD%C9%BD%D7%AF%C2%C3%C9%E1%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_58229%2FThumbnailImg%2F20131225160342569000.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A408%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453447714%3B%7Di%3A28408%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2228408%22%3Bs%3A4%3A%22name%22%3Bs%3A14%3A%22%CE%F7%B0%B2%C2%A4%BA%A3%B4%F3%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A74%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_28408%2FThumbnailImg%2F20130917135038761110.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A188%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453447724%3B%7Di%3A28266%3Ba%3A6%3A%7Bs%3A2%3A%22id%22%3Bs%3A5%3A%2228266%22%3Bs%3A4%3A%22name%22%3Bs%3A14%3A%22%CE%F7%B0%B2%B6%AB%B7%BD%B4%F3%BE%C6%B5%EA%22%3Bs%3A3%3A%22img%22%3Bs%3A73%3A%22http%3A%2F%2Fimage.tempus.cn%2FHotel%2FH_28266%2FThumbnailImg%2F2011070810512165263.jpg%22%3Bs%3A6%3A%22lprice%22%3Bd%3A318%3Bs%3A4%3A%22star%22%3Bs%3A43%3A%22%3Cspan+class%3D%22x4%22+title%3D%22%CB%C4%D0%C7%BC%B6%BE%C6%B5%EA%22%3E%3C%2Fspan%3E%22%3Bs%3A4%3A%22time%22%3Bi%3A1453447746%3B%7D%7D
Host: www.feiren.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
act=&flightNo=1&fromCityName=1&fromcode=&toCityName=aviabpdf&tocode=&v_code_number=94102

1.png

2.png

漏洞证明：

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：无影响厂商忽略

忽略时间：2016-01-29 10:30

厂商回复：

漏洞Rank：4 (WooYun评价)

最新状态：

暂无