S

dedecms

SQL 注入

error/data/prvd/src/sink/sqli/001-mysqli_query.php in mysqli_queryphp
问题 #
DEDECMS-4
事件
2
用户
1
Assignee
解决
忽略
链接问题跟踪器
较旧较新

事件 6d4dc09e75f0434187b2b41e16a5201e

JSON (4.7 KB)
?

172.17.0.1

ID: 7cmrl5osvgfpv21l4dvc549qin

Unknown Browser

php

版本： 7.2.9

标签

  • levelerror
  • loggerphp
  • runtimephp 7.2.9
  • runtime.namephp
  • server_name9ce72b4af189
  • sitelocalhost
  • urlhttp://localhost:8080/dede/content_batchup_action.php
  • userid:7cmrl5osvgfpv21l4dvc549qin

    • 消息

    SQL 注入
    • 23:00:49
      error_reporting
      mysqli_query() expects parameter 1 to be mysqli, string given
      line
      6
      code
      2
      file
      /data/prvd/src/sink/sqli/001-mysqli_query.php
    • 23:00:49
      error_reporting
      Undefined offset: 1
      line
      114
      code
      8
      file
      /var/www/html/include/dedesqli.class.php
    • 23:00:49
      message
      SQL 注入
    正文
    action
    check
    dopost
    go
    endid
    2'"><xtanzi>./../xtanzi
    endtime
    2018-11-08 23:00:39
    keyword
    newtypeid
    1
    startid
    1
    starttime
    2018-10-09 23:00:39
    typeid
    0
    userid
    Cookies
    DedeLoginTime
    1541688180
    DedeLoginTime__ckMd5
    e0aae65f320d5585
    DedeUserID
    1
    DedeUserID__ckMd5
    5ebcf2784562fcbb
    ENV_GOBACK_URL
    /dede/content_list.php
    PHPSESSID
    ********
    _csrf_name_36da6296
    1922605a943b494197d1e2b8fb3185d0
    _csrf_name_36da6296__ckMd5
    a98b70f940a7e746
    _csrf_name_5964670e
    f134da46f0caa624080e75cf39f400bb
    _csrf_name_5964670e__ckMd5
    ce47e55d4480e8ab
    menuitems
    1_1,2_1,3_1,4_1,5_1
    标头
    Accept
    text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
    Accept-Encoding
    gzip, deflate, br
    Accept-Language
    zh-CN,zh;q=0.9,en;q=0.8
    Cache-Control
    max-age=0
    Connection
    keep-alive
    Content-Length
    180
    Content-Type
    application/x-www-form-urlencoded
    Host
    localhost:8080
    Origin
    http://localhost:8080
    Prvd-Fuzzer
    halo_from_fate0
    Referer
    http://localhost:8080/dede/content_batch_up.php
    Upgrade-Insecure-Requests
    1
    User-Agent
    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36

    User

    ?
    ID
    7cmrl5osvgfpv21l4dvc549qin
    IP Address
    172.17.0.1
    bigfile_info
    []
    dede_admin_channel
    0
    dede_admin_id
    1
    dede_admin_name
    admin
    dede_admin_purview
    admin_AllowAll
    dede_admin_style
    newdedecms
    dede_admin_type
    10
    file_info
    []
    securimage_code_value
    aq2t

    Runtime

    Name
    php
    Version
    7.2.9

    SDK

    姓名
    sentry-php
    版本
    1.9.2
    Ownership Rules
    Create Ownership Rule
    All Environments
    标签
    level
    100%error
    logger
    100%php
    runtime
    100%php 7.2.9
    runtime.name
    100%php
    server_name
    100%9ce72b4af189
    site
    100%localhost
    url
    100%http://localhost:8080/dede/content_batchup_action.php
    user
    100%7cmrl5osvgfpv21l4dvc549qin
    通知

    由于 已订阅工作流通知 你正在接受该项目的更新。

    取消订阅