SQL 注入

error/data/prvd/src/sink/sqli/001-mysqli_query.php in mysqli_queryphp

DEDECMS-7

解决

忽略

链接问题跟踪器

172.17.0.1

ID: 7cmrl5osvgfpv21l4dvc549qin

Unknown Browser

php

版本： 7.2.9

消息

SQL 注入

Stacktrace(最近的调用最先显示)

全部原始数据

/data/prvd/src/sink/sqli/001-mysqli_query.php in mysqli_query at line 5
1. <?php
4. function mysqli_query($link, $query, $resultmode=MYSQLI_STORE_RESULT) {
5. prvd_check_sqli($query, prvd_translate("Sql Injection"));
6. return call_user_func(PRVD_RENAME_PREFIX."mysqli_query", $link, $query, $resultmode);
7. }
/var/www/html/include/dedesqli.class.php in Execute at line 315
1. CheckSql($this->queryString);
2. }
4. $t1 = ExecTime();
5. //var_dump($this->queryString);
6. $this->result[$id] = mysqli_query($this->linkID, $this->queryString);
7. //var_dump(mysql_error());
9. //查询性能测试
10. if($this->recordLog) {
11. $queryTime = ExecTime() - $t1;
co_export.php at line 141
1. }
2. else
3. {
4. $dsql->SetQuery("SELECT * FROM `#@__co_htmls` WHERE isdown='1' ORDER BY aid $orderway LIMIT $startdd,$pagesize");
5. }
6. $dsql->Execute();
7. while($row = $dsql->GetObject())
8. {
9. if(trim($row->result=='')) continue;
11. //$addSqlTemplate,$mainSqlTemplate,$indexSqlTemplate

Breadcrumbs

23:06:58

error_reporting	`mysqli_query() expects parameter 1 to be mysqli, string given`
line	6
code	2
file	/data/prvd/src/sink/sqli/001-mysqli_query.php

23:06:58

error_reporting	`Undefined offset: 1`
line	114
code	8
file	/var/www/html/include/dedesqli.class.php

23:06:58

error_reporting	`A non well formed numeric value encountered`
line	131
code	8
file	/var/www/html/dede/co_export.php

23:06:58

error_reporting	`A non well formed numeric value encountered`
line	132
code	8
file	/var/www/html/dede/co_export.php

23:06:58
message
SQL 注入

Formatted curl

GET/dede/co_export.phplocalhost

查询字符串

arcrank	0
channelid	1
dopost	done
imageField_x	31
imageField_y	6
nid	1
pagesize	60'"><xtanzi>./../xtanzi
randcc	12
totalcc	20
typeid	18

Cookies

DedeLoginTime	1541688180
DedeLoginTime__ckMd5	e0aae65f320d5585
DedeUserID	1
DedeUserID__ckMd5	5ebcf2784562fcbb
ENV_GOBACK_URL	/dede/content_list.php
PHPSESSID	********
_csrf_name_36da6296	1922605a943b494197d1e2b8fb3185d0
_csrf_name_36da6296__ckMd5	a98b70f940a7e746
_csrf_name_5964670e	f134da46f0caa624080e75cf39f400bb
_csrf_name_5964670e__ckMd5	ce47e55d4480e8ab
menuitems	1_1,2_1,3_1,4_1,5_1

标头

Accept	text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8
Accept-Encoding	gzip, deflate, br
Accept-Language	zh-CN,zh;q=0.9,en;q=0.8
Connection	keep-alive
Host	localhost:8080
Prvd-Fuzzer	halo_from_fate0
Referer	http://localhost:8080/dede/co_export.php?nid=1
Upgrade-Insecure-Requests	1
User-Agent	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36

User

Runtime

Name	php
Version	7.2.9

SDK

姓名	sentry-php
版本	1.9.2

Ownership Rules

Create Ownership Rule

All Environments

首次出现时间

时间:: a few seconds ago
Nov 8, 2018 11:06:58 PM HKT
版本:: not configured

最后出现时间

时间:: a few seconds ago
Nov 8, 2018 11:06:58 PM HKT
版本:: not configured

通知

由于已订阅工作流通知你正在接受该项目的更新。

bigfile_info	[]
dede_admin_channel	0
dede_admin_id	1
dede_admin_name	admin
dede_admin_purview	admin_AllowAll
dede_admin_style	newdedecms
dede_admin_type	10
file_info	[]
securimage_code_value	aq2t

dedecms

SQL 注入

问题 #

事件

用户

Assignee

172.17.0.1

Unknown Browser

php

标签

消息

Stacktrace(最近的调用最先显示)

GET/dede/co_export.phplocalhost

查询字符串

Cookies

标头

User

Runtime

SDK

Ownership Rules

All Environments

最近 24 小时

最近 30 天

首次出现时间

最后出现时间

标签

通知

link	Object mysqli
query	SELECT * FROM `dede_co_htmls` WHERE nid='1' AND isdown='1' ORDER BY aid asc LIMIT 0,60\'\"><xtanzi>./../xtanzi

dedecms

SQL 注入

问题 #

事件

用户

Assignee

事件 095a7b5532164c1ab5921f440a33988f

172.17.0.1

Unknown Browser

php

标签

消息

Stacktrace(最近的调用最先显示)

Breadcrumbs

GET/dede/co_export.phplocalhost

查询字符串

Cookies

标头

User

Runtime

SDK

Ownership Rules

All Environments

最近 24 小时

最近 30 天

首次出现时间

最后出现时间

标签

通知