来源：自学PHP网 时间：2015-04-17 12:00 作者： 阅读:次
[导读] 一个小小xss引起的大问题1.100e站点有个业务是：一百易诚招全国各区/县代理，看来是要做大的样子http://100e.com/business/v3/index.html2.可惜这个页面存在xss的入口，我申请了注册代理，在【主...
|
一个小小xss引起的大问题
1.100e站点有个业务是：一百易诚招全国各区/县代理，看来是要做大的样子
http://100e.com/business/v3/index.html
2.可惜这个页面存在xss的入口，我申请了注册代理，在【主营业务】、【联系地址】、【代理计划】，均可以插入xss code！截图如下：
 3.发送注册代理请求，没过几分钟勤快的管理员就上钩了：
 4.去后台看看，后台怎么做的这么寒碜那！
 5.后台是存在SQL注入的，随便点开一个连接，便是注入啊：
 6.SQLMAP跑了下，库还是很多的
 下面是100eDB的表：
+---------------------------------+
| Active_Love_Order |
| Admin |
| Admin_Member |
| Admin_MemberRight |
| Admin_Question |
| Admin_Record |
| Admin_Right |
| Article_Media |
| Article_Notice |
| Article_UserTip |
| BenefitCode |
| CPUErrLog |
| CS_Phone_Record |
| CS_Record |
| CS_Work |
| CS_Work_Result |
| Chat_AddFriend |
| Chat_Friend |
| City_GuestBook |
| City_Post |
| City_RecommendBook |
| City_ServerInfo |
| CommendBook |
| CommendUser |
| CreditCard_info |
| Dealer |
| DealerChargeUser |
| DealerPayRecord |
| DealerUser |
| DownloadParth |
| EC_Check_Login |
| EC_MainProduct_Area |
| EC_MainProduct_Career |
| EC_MainProduct_Client |
| EC_MainProduct_Free |
| EC_MainProduct_UseRelate |
| EC_MainProduct_Version |
| EC_Order_Client |
| EC_Order_Course |
| EC_Order_Offline |
| EC_Order_VIPLog |
| EC_Promotion |
| EC_Score_Use |
| EC_SubProduct |
| EC_SubProduct1 |
| EC_Subproduct_2 |
| EC_UserOrder |
| EC_swf_FileHeight |
| ErrTemp |
| FAQ |
| FAQ_Category |
| Flash_Category |
| Flash_Product |
| Head_Size |
| KeyCode |
| MarketFreeUser |
| Member_Career |
| Msg_In |
| Msg_Out |
| My100e_Book |
| My100e_Sentence |
| OnlineUserCount |
| PayOut_Record |
| PayOut_Type |
| Pay_Agency |
| Pay_Apply |
| Pay_CallOrder |
| Pay_Cart |
| Pay_ChargeAmountType |
| Pay_ChargeCode |
| Pay_ChargeCode_Bak_NoChargeDate |
| Pay_ChargeCode_Ban |
| Pay_ChargeCode_Inspirit |
| Pay_ChargeCode_ServiceDate |
| Pay_ChargeCode_ServiceTime |
| Pay_ChargeCode_SubProduct |
| Pay_Record |
| Pay_Record_Ambow |
| Pay_Record_Free |
| Pay_Record_FreeChargeCode |
| Pay_Record_JS |
| Pay_UserType |
| ProductContent |
| ProductsCategory |
| ProductsCategory_Ancestor |
| ProviderUsers |
| Provider_Apply |
| Provider_Member |
| Provider_Pay |
| Providers |
| Seller_AgencyType |
| Seller_Apply |
| Seller_City |
| Seller_Member |
| Seller_Member_Info |
| Seller_Order |
| Seller_Order_Cancel |
| Seller_Order_True |
| Seller_Pay |
| Seller_PayType |
| Seller_School_Apply |
| Seller_School_Member |
| Seller_Service |
| Table_Noise |
| Teacher |
| Teacher_Apply |
| Teacher_Assign |
| Teacher_Member |
| Teacher_Order |
| Teacher_Video |
| UpLoadTypes |
| UserInfoForDisk |
| UserInfoForDiskSummary |
| UserInspirit_AdvanceReturn |
| UserInspirit_Bonus |
| UserInspirit_Receipt |
| UserSummary |
| UserUploads |
| UserUploadsBBS |
| VIPUnion |
| Zone_City |
| Zone_Country |
| Zone_Province |
| mymember |
| mymember_LogIn |
| tmobile |
+---------------------------------+
8.由于没有授权，我就不敢更进一步了。
修复方案：
都不是什么大问题，还是比较好解决的，希望引起重视！ |
自学PHP网专注网站建设学习,PHP程序学习,平面设计学习，以及操作系统学习
京ICP备14009008号-1@版权所有www.zixuephp.com
网站声明：本站所有视频，教程都由网友上传，站长收集和分享给大家学习使用，如由牵扯版权问题请联系站长邮箱904561283@qq.com
