orion.extfeedbackform Bitrix模块SQL注入漏洞

Follow 0

Basic Fields

SSV ID:: SSV-90185

Find Time:: 2015-12-16

Submit Time:: 2015-12-25

Level:

Category:: SQL 注入

Component:

Author:: High-Tech Bridge Security Research Lab

Submitter:: Knownsec

CVE-ID：: CVE-2015-8355

CNNVD-ID：: Add

CNVD-ID：: CNVD-2015-08406

ZoomEye Dork：: Add

Source

Login to see

Detail

Contributor 0x153 Got 0KB

Login to see

have 0 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor rage totally have 1KB

Login to see

have 1 Exchange

Reference Linking

Login to see

Solutions

Login to see

anonymous 兑换PoC

Timeline

High-Tech Bridge Security Research Lab

2015-12-16 发现/披露了漏洞
Knownsec

2015-12-25 提交了漏洞
rage

2016-01-05 提交更新了 PoC
Knownsec

2016-01-07 提交补充了漏洞详情

Related Vuls

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes