漏洞关键信息 标题 SQL Injection Vulnerability (Time-Based Blind) in Smart Integrated Management Platform System - XCamera Module 受影响版本 Smart Integrated Management Platform System (all versions) 厂商 Smart Integrated Management Platform System (福州银达云创信息科技有限公司) Fuzhou Yinda Yunchuang Information Technology Co., Ltd. 软件 Smart Integrated Management Platform System (智慧综合管理平台系统) 描述 A vulnerability was found in Smart Integrated Management Platform System developed by Fuzhou Yinda Yunchuang Information Technology Co., Ltd. Two main issues are identified: 1. Unauthenticated SQL Injection via ChannelName Parameter (Time-Based Blind): - The application does not properly sanitize the parameter. - User-controlled input from POST parameters is directly used in SQL queries. - The vulnerability does not require authentication. 2. Exploiting the Time-Based Blind SQL Injection Vulnerability: - Attackers can use techniques like to extract information. - The injection causes the database to delay its response. 例子时间盲SQL注入payload ;WAITFOR DELAY ‘0:0:5’-- 漏洞端点请求示例 HTTP POST 请求参数含上述payload 验证漏洞利用 服务器响应延迟5秒确认漏洞存在 概念验证 1. 测试时间盲SQL注入 2. 测量响应时间 3. 提取数据库信息 技术细节 根源：未验证POST参数直接用于SQL查询 影响：数据泄露、修改或删除、DOS等 检测 使用FOFA搜索特定格式请求，影响系统300+ 分类 CWE-89：SQL注入 CVSS Base Score：8.0-9.0，高风险