Cool music main site SQL injection vulnerability requires parameter filtering (ROOT injection/Intranet ip leakage)

Cool music main site SQL injection vulnerability requires parameter filtering (ROOT injection/Intranet ip leakage)

Cool music main site SQL Injection Vulnerability (ROOT injection/Intranet ip leakage)

Different from WooYun: The domain name of a MySQL blind note (ROOT permission) in cool music, this is on the main site, and the vulnerability here does not seem to have been fixed!
 

www.kuwo.cn/hsy/hz/HzWdjNewsDetail?id=14003

Try it manually. This is what it looks like when it is true.
 

This is the case when it is false.
 

Basically, it is determined that the injection exists and sqlmap runs.
 

ROOT injection and leakage of Intranet ip addresses
 

Four databases and the current database is EDITOR
 

 

 

 

 

 

Solution:

Filter parameters or remove unnecessary pages