A large browser game SQL injection has penetrated into the company to obtain a large amount of data.

A large browser game SQL injection has penetrated into the company to obtain a large amount of data.

Later I learned that it was a very large development company, covering Web games, websites, and smart home. It has penetrated into the development environment .. Start at http://www.958game.com/main site. The problem lies in the gaming server http://g.kehui.net: 82/index. php? Op = news & file = read & id = 1 & aid = 7,

Directly write the file to get the shell,

The password of the database account is scary.


Thousands of users... How many databases can the game extract and write data for itself... Start to enter the Intranet ..

A large amount of development materials and smart home materials ..


Companies are involved in a large number of websites,
Http://kehui.net [kehui.net]
Http://www.kehui.net [cloud connected to the world-smart Cloud Valley-Smart Home-Iot-cloud computing | energy-saving automatic control | contract ...]
Http:// OS .kehui.net [smart yungu _ WisOS cloud operating system]
Http://www.cn26.com [-Exhibition-China Women Entrepreneurs Alliance-Women Entrepreneurs ...]
Http://cn26.com [look for to see-look for to see]
Http://qdtsw.kehui.net [Qingdao Communist Youth League]
Http://en.kehui.net [singapore wiscloud technology pte. ltd | I-Smart | wiscloud | ...]
Http://wiscloud.kehui.net [Chinese Female Entrepreneurs Alliance-female entrepreneurs-Female Entrepreneurs network]
Http://iwiscloud.com [Smart Home, wireless Smart Home, Smart Home System, smart Cloud Valley Smart Home, smart ...]
Http://www.wiscloud.org [experience center-China Women Entrepreneurs Alliance-Women Entrepreneurs-women ...]
Http://wiscloud.org [smart Cloud Valley cloud computing Co., Ltd.-China Women Entrepreneurs Alliance-Women Entrepreneurs alliance ...]
Http://cn.iwiscloud.com [Smart Home, wireless Smart Home, Smart Home System, smart Cloud Valley Smart Home, smart ...]
Http://en.iwiscloud.com [Smart Home, wireless Smart Home, Smart Home System, smart Cloud Valley Smart Home, smart ...]
Http://nvqi.cn26.com [Yantai longxiang automobile sales and service Co., Ltd.-China Female Entrepreneurs Alliance-female ...]
Scan several hosts and add the ROOT password.

Okay... So far.

Solution:

Filter