注册
登录
| 关键词： nbsp anwsion wenda http com account entries SVN php app |
漏洞作者： 瘦蛟舞 提交时间： 2012-10-11 公开时间： 2012-10-16 漏洞类型： SQL注射漏洞 详细说明： 1.数据库配置信息泄漏 http://wenda.anwsion.com/system/config/database.php_bak 2.SQLI 一个http://wenda.anwsion.com/category/1'" 两个http://wenda.anwsion.com/account/ajax/login_process/ POST：net_auto_login=1&password=123456&post_hash=9ed50d5bb8509404&return_url=http%3A%2F%2Fwenda.anwsion.com%2F&user_name=%5c 3.SVN http://wenda.anwsion.com/.svn/entries http://wenda.anwsion.com/app/.svn/entries http://wenda.anwsion.com/static/.svn/entries http://wenda.anwsion.com/models/.svn/entries http://wenda.anwsion.com/install/.svn/entries http://wenda.anwsion.com/system/.svn/entries http://wenda.anwsion.com/views/.svn/entries 4.error message 泄漏绝对路径 http://wenda.anwsion.com/app/account/ajax.php http://wenda.anwsion.com/app/account/find_password.php http://wenda.anwsion.com/app/account/main.php http://wenda.anwsion.com/app/account/openid.php http://wenda.anwsion.com/app/account/qq.php http://wenda.anwsion.com/app/account/setting.php |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
