SQL Injection exists in the official APP of Shanda game (injection parameter v/type, Boolean blind injection)

SQL Injection exists in the official APP of Shanda game (injection parameter v/type, Boolean blind injection)

SQL Injection for APP security

Target: Shanda game assistant Butler APP

SQL Injection exists in the following areas: (injection parameter v/type, Boolean blind injection)
 

Http://api.g.sdo.com/game/getBannerList? NetFlag = WIFI & v = 2.0 & OS = 1 & type = 2 & ticket = RNK76Qw9Qh % kernel % 2 FTAQ % kernel % 2F8oVtZ64yU02C2w % 3D & sequence = 25 & version = a.6.0.0

1. SQLMap vulnerability proof
 

2. When data is run, an existing filter is generated. Therefore, you have written a Python script to run the current database user as a proof. The rest will not go deep ~
 

 

Solution:

Please kindly advise ~