SQL 注入

error/data/prvd/src/sink/sqli/001-mysqli_query.php in mysqli_queryphp

DEDECMS-M

解决

忽略

链接问题跟踪器

未知的用户

Unknown Browser

php

版本： 7.2.9

消息

SQL 注入

Stacktrace(最近的调用最先显示)

全部原始数据

/data/prvd/src/sink/sqli/001-mysqli_query.php in mysqli_query at line 5

<?php
function mysqli_query($link, $query, $resultmode=MYSQLI_STORE_RESULT) {
prvd_check_sqli($query, prvd_translate("Sql Injection"));
return call_user_func(PRVD_RENAME_PREFIX."mysqli_query", $link, $query, $resultmode);
}

link

Object mysqli

query

INSERT INTO
                `dede_member_pms` (`floginid`,`fromid`,`toid`,`tologinid`,`folder`,`subject`,`sendtime`,`writetime`,`hasview`,`isadmin`,`message`)
                VALUES ('admin','2','1','admin','inbox','sss'&quot;&gt;&lt;xtanzi&gt;./../xtanzi','1541693358','1541693358','0','1','sss')

/var/www/html/include/dedesqli.class.php in ExecuteNoneQuery at line 225

}
//SQL语句安全检查
if($this->safeCheck) CheckSql($this->queryString,'update');
$t1 = ExecTime();
$rs = mysqli_query($this->linkID, $this->queryString);
//查询性能测试
if($this->recordLog) {
$queryTime = ExecTime() - $t1;
$this->RecordLog($queryTime);

sql

INSERT INTO
                `#@__member_pms` (`floginid`,`fromid`,`toid`,`tologinid`,`folder`,`subject`,`sendtime`,`writetime`,`hasview`,`isadmin`,`message`)
                VALUES ('admin','2','1','admin','inbox','sss'&quot;&gt;&lt;xtanzi&gt;./../xtanzi','1541693358','1541693358','0','1','sss')

pm.php at line 200
1. if(!is_array($row2))
2. {
3. $row3= "INSERT INTO
4. `#@__member_pms` (`floginid`,`fromid`,`toid`,`tologinid`,`folder`,`subject`,`sendtime`,`writetime`,`hasview`,`isadmin`,`message`)
5. VALUES ('admin','{$row['id']}','{$cfg_ml->M_ID}','{$cfg_ml->M_LoginID}','inbox','{$row['subject']}','{$row['sendtime']}','{$row['writetime']}','{$row['hasview']}','{$row['isadmin']}','{$row['message']}')";
6. $dsql->ExecuteNoneQuery($row3);
7. }
8. }
9. if($state=="1"){
10. $wsql= " toid='{$cfg_ml->M_ID}' AND folder='inbox' AND writetime!='' and hasview=1";
11. $tname = "收件箱";

error_reporting	`Undefined offset: 1`
line	114
code	8
file	/var/www/html/include/dedesqli.class.php

Formatted curl

GET/member/pm.phplocalhost

Cookies

DedeLoginTime	1541693325
DedeLoginTime__ckMd5	d26865209569b60d
DedeUserID	1
DedeUserID__ckMd5	5ebcf2784562fcbb
ENV_GOBACK_URL	/dede/member_pm.php
PHPSESSID	********
_csrf_name_36da6296	1922605a943b494197d1e2b8fb3185d0
_csrf_name_36da6296__ckMd5	a98b70f940a7e746
_csrf_name_5964670e	f134da46f0caa624080e75cf39f400bb
_csrf_name_5964670e__ckMd5	ce47e55d4480e8ab

标头

Accept	text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8
Accept-Encoding	gzip, deflate, br
Accept-Language	zh-CN,zh;q=0.9,en;q=0.8
Cache-Control	max-age=0
Connection	keep-alive
Host	localhost:8080
Prvd-Fuzzer	halo_from_fate0
Upgrade-Insecure-Requests	1
User-Agent	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36

Runtime

Name	php
Version	7.2.9

SDK

姓名	sentry-php
版本	1.9.2

Ownership Rules

Create Ownership Rule

All Environments

首次出现时间

时间:: 2 minutes ago
Nov 9, 2018 12:09:22 AM HKT
版本:: not configured

最后出现时间

时间:: 2 minutes ago
Nov 9, 2018 12:09:22 AM HKT
版本:: not configured

通知

由于已订阅工作流通知你正在接受该项目的更新。

dedecms

SQL 注入

问题 #

事件

用户

Assignee

未知的用户

Unknown Browser

php

标签

消息

Stacktrace(最近的调用最先显示)

GET/member/pm.phplocalhost

Cookies

标头

Runtime

SDK

Ownership Rules

All Environments

最近 24 小时

最近 30 天

首次出现时间

最后出现时间

标签

level

logger

runtime

runtime.name

server_name

site

url

通知

dedecms

SQL 注入

问题 #

事件

用户

Assignee

事件 4014afd4cb2647f291a5d09ed072cdba

未知的用户

Unknown Browser

php

标签

消息

Stacktrace(最近的调用最先显示)

Breadcrumbs

GET/member/pm.phplocalhost

Cookies

标头

Runtime

SDK

Ownership Rules

All Environments

最近 24 小时

最近 30 天

首次出现时间

最后出现时间

标签

level

logger

runtime

runtime.name

server_name

site

url

通知