S

dedecms

SQL 注入

error/data/prvd/src/sink/sqli/001-mysqli_query.php in mysqli_queryphp
问题 #
DEDECMS-C
事件
6
用户
0
Assignee
解决
忽略
链接问题跟踪器
较旧较新

事件 ac7d144672b74ffbb85ec53535f08f3e

JSON (4.9 KB)
?

172.17.0.1

ID: 7cmrl5osvgfpv21l4dvc549qin

Unknown Browser

php

版本： 7.2.9

标签

  • levelerror
  • loggerphp
  • runtimephp 7.2.9
  • runtime.namephp
  • server_name9ce72b4af189
  • sitelocalhost
  • urlhttp://localhost:8080/dede/co_gather_start_action.php
  • userid:7cmrl5osvgfpv21l4dvc549qin

    • 消息

    SQL 注入
    • 23:27:34
      error_reporting
      mysqli_query() expects parameter 1 to be mysqli, string given
      line
      6
      code
      2
      file
      /data/prvd/src/sink/sqli/001-mysqli_query.php
    • 23:27:34
      error_reporting
      A non well formed numeric value encountered
      line
      22
      code
      8
      file
      /var/www/html/dede/co_gather_start_action.php
    • 23:27:34
      error_reporting
      A non well formed numeric value encountered
      line
      23
      code
      8
      file
      /var/www/html/dede/co_gather_start_action.php
    • 23:27:34
      error_reporting
      A non well formed numeric value encountered
      line
      25
      code
      8
      file
      /var/www/html/dede/co_gather_start_action.php
    • 23:27:34
      error_reporting
      Undefined offset: 1
      line
      114
      code
      8
      file
      /var/www/html/include/dedesqli.class.php
    • 23:27:34
      message
      SQL 注入
    查询字符串
    nid
    0
    notckpic
    0
    oldstart
    0
    pagesize
    5
    sptime
    0
    startdd
    50'"><xtanzi>./../xtanzi
    totalnum
    53
    Cookies
    DedeLoginTime
    1541688180
    DedeLoginTime__ckMd5
    e0aae65f320d5585
    DedeUserID
    1
    DedeUserID__ckMd5
    5ebcf2784562fcbb
    ENV_GOBACK_URL
    /dede/content_list.php
    PHPSESSID
    ********
    _csrf_name_36da6296
    1922605a943b494197d1e2b8fb3185d0
    _csrf_name_36da6296__ckMd5
    a98b70f940a7e746
    _csrf_name_5964670e
    f134da46f0caa624080e75cf39f400bb
    _csrf_name_5964670e__ckMd5
    ce47e55d4480e8ab
    menuitems
    1_1,2_1,3_1,4_1,5_1
    标头
    Accept
    text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
    Accept-Encoding
    gzip, deflate, br
    Accept-Language
    zh-CN,zh;q=0.9,en;q=0.8
    Connection
    keep-alive
    Host
    localhost:8080
    Prvd-Fuzzer
    halo_from_fate0
    Referer
    http://localhost:8080/dede/co_gather_start_action.php?notckpic=0&sptime=0&nid=0&oldstart=0&totalnum=53&startdd=45&pagesize=5
    Upgrade-Insecure-Requests
    1
    User-Agent
    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36

    User

    ?
    ID
    7cmrl5osvgfpv21l4dvc549qin
    IP Address
    172.17.0.1
    bigfile_info
    []
    dede_admin_channel
    0
    dede_admin_id
    1
    dede_admin_name
    admin
    dede_admin_purview
    admin_AllowAll
    dede_admin_style
    newdedecms
    dede_admin_type
    10
    file_info
    []
    securimage_code_value
    aq2t

    Runtime

    Name
    php
    Version
    7.2.9

    SDK

    姓名
    sentry-php
    版本
    1.9.2
    Ownership Rules
    Create Ownership Rule
    All Environments
    最近 24 小时
    1100000000000000000000000000000000000000000000000000000000000000000000000000110首次出现时间最后出现时间
    最近 30 天
    1100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110首次出现时间最后出现时间
    首次出现时间
    时间:

    版本:
    not configured
    最后出现时间
    时间:

    版本:
    not configured
    标签

    No tags found

    通知

    由于 已订阅工作流通知 你正在接受该项目的更新。

    取消订阅