WooYun.org

漏洞地址
http://www.dfyb.com.cn/sales/ProductPhoto.asp?productid=21

Database: master
[292 tables]
+---------------------------------------------------+
| INFORMATION_SCHEMA.CHECK_CONSTRAINTS |
| INFORMATION_SCHEMA.COLUMNS |
| INFORMATION_SCHEMA.COLUMN_DOMAIN_USAGE |
| INFORMATION_SCHEMA.COLUMN_PRIVILEGES |
| INFORMATION_SCHEMA.CONSTRAINT_COLUMN_USAGE |
| INFORMATION_SCHEMA.CONSTRAINT_TABLE_USAGE |
| INFORMATION_SCHEMA.DOMAINS |
| INFORMATION_SCHEMA.DOMAIN_CONSTRAINTS |
| INFORMATION_SCHEMA.KEY_COLUMN_USAGE |
| INFORMATION_SCHEMA.PARAMETERS |
| INFORMATION_SCHEMA.REFERENTIAL_CONSTRAINTS |
| INFORMATION_SCHEMA.ROUTINES |
| INFORMATION_SCHEMA.ROUTINE_COLUMNS |
| INFORMATION_SCHEMA.SCHEMATA |
| INFORMATION_SCHEMA.TABLES |
| INFORMATION_SCHEMA.TABLE_CONSTRAINTS |
| INFORMATION_SCHEMA.TABLE_PRIVILEGES |
| INFORMATION_SCHEMA.VIEWS |
| INFORMATION_SCHEMA.VIEW_COLUMN_USAGE |
| INFORMATION_SCHEMA.VIEW_TABLE_USAGE |
| dbo.MSreplication_options |
| dbo.spt_fallback_db |
| dbo.spt_fallback_dev |
| dbo.spt_fallback_usg |
| dbo.spt_monitor |
| dbo.spt_values |
| sys.all_columns |
| sys.all_objects |
| sys.all_parameters |
| sys.all_sql_modules |
| sys.all_views |
| sys.allocation_units |
| sys.assemblies |
| sys.assembly_files |
| sys.assembly_modules |
| sys.assembly_references |
| sys.assembly_types |
| sys.asymmetric_keys |
| sys.backup_devices |
| sys.certificates |
| sys.check_constraints |
| sys.column_type_usages |
| sys.column_xml_schema_collection_usages |
| sys.columns |
| sys.computed_columns |
| sys.configurations |
| sys.conversation_endpoints |
| sys.conversation_groups |
| sys.credentials |
| sys.crypt_properties |
| sys.data_spaces |
| sys.database_files |
| sys.database_mirroring |
| sys.database_mirroring_endpoints |
| sys.database_mirroring_witnesses |
| sys.database_permissions |
| sys.database_principal_aliases |
| sys.database_principals |
| sys.database_recovery_status |
| sys.database_role_members |
| sys.databases |
| sys.default_constraints |
| sys.destination_data_spaces |
| sys.dm_broker_activated_tasks |
| sys.dm_broker_connections |
| sys.dm_broker_forwarded_messages |
| sys.dm_broker_queue_monitors |
| sys.dm_clr_appdomains |
| sys.dm_clr_loaded_assemblies |
| sys.dm_clr_properties |
| sys.dm_clr_tasks |
| sys.dm_db_file_space_usage |
| sys.dm_db_index_usage_stats |
| sys.dm_db_mirroring_connections |
| sys.dm_db_missing_index_details |
| sys.dm_db_missing_index_group_stats |
| sys.dm_db_missing_index_groups |
| sys.dm_db_partition_stats |
| sys.dm_db_session_space_usage |
| sys.dm_db_task_space_usage |
| sys.dm_exec_background_job_queue |
| sys.dm_exec_background_job_queue_stats |
| sys.dm_exec_cached_plans |
| sys.dm_exec_connections |
| sys.dm_exec_query_memory_grants |
| sys.dm_exec_query_optimizer_info |
| sys.dm_exec_query_resource_semaphores |
| sys.dm_exec_query_stats |
| sys.dm_exec_query_transformation_stats |
| sys.dm_exec_requests |
| sys.dm_exec_sessions |
| sys.dm_fts_active_catalogs |
| sys.dm_fts_index_population |
| sys.dm_fts_memory_buffers |
| sys.dm_fts_memory_pools |
| sys.dm_fts_population_ranges |
| sys.dm_io_backup_tapes |
| sys.dm_io_cluster_shared_drives |
| sys.dm_io_pending_io_requests |
| sys.dm_os_buffer_descriptors |
| sys.dm_os_child_instances |
| sys.dm_os_cluster_nodes |
| sys.dm_os_hosts |
| sys.dm_os_latch_stats |
| sys.dm_os_loaded_modules |
| sys.dm_os_memory_allocations |
| sys.dm_os_memory_cache_clock_hands |
| sys.dm_os_memory_cache_counters |
| sys.dm_os_memory_cache_entries |
| sys.dm_os_memory_cache_hash_tables |
| sys.dm_os_memory_clerks |
| sys.dm_os_memory_objects |
| sys.dm_os_memory_pools |
| sys.dm_os_performance_counters |
| sys.dm_os_ring_buffers |
| sys.dm_os_schedulers |
| sys.dm_os_stacks |
| sys.dm_os_sublatches |
| sys.dm_os_sys_info |
| sys.dm_os_tasks |
| sys.dm_os_threads |
| sys.dm_os_virtual_address_dump |
| sys.dm_os_wait_stats |
| sys.dm_os_waiting_tasks |
| sys.dm_os_worker_local_storage |
| sys.dm_os_workers |
| sys.dm_qn_subscriptions |
| sys.dm_repl_articles |
| sys.dm_repl_schemas |
| sys.dm_repl_tranhash |
| sys.dm_repl_traninfo |
| sys.dm_tran_active_snapshot_database_transactions |
| sys.dm_tran_active_transactions |
| sys.dm_tran_current_snapshot |
| sys.dm_tran_current_transaction |
| sys.dm_tran_database_transactions |
| sys.dm_tran_locks |
| sys.dm_tran_session_transactions |
| sys.dm_tran_top_version_generators |
| sys.dm_tran_transactions_snapshot |
| sys.dm_tran_version_store |
| sys.endpoint_webmethods |
| sys.endpoints |
| sys.event_notification_event_types |
| sys.event_notifications |
| sys.events |
| sys.extended_procedures |
| sys.extended_properties |
| sys.filegroups |
| sys.foreign_key_columns |
| sys.foreign_keys |
| sys.fulltext_catalogs |
| sys.fulltext_document_types |
| sys.fulltext_index_catalog_usages |
| sys.fulltext_index_columns |
| sys.fulltext_indexes |
| sys.fulltext_languages |
| sys.http_endpoints |
| sys.identity_columns |
| sys.index_columns |
| sys.indexes |
| sys.internal_tables |
| sys.key_constraints |
| sys.key_encryptions |
| sys.linked_logins |
| sys.login_token |
| sys.master_files |
| sys.master_key_passwords |
| sys.message_type_xml_schema_collection_usages |
| sys.messages |
| sys.module_assembly_usages |
| sys.numbered_procedure_parameters |
| sys.numbered_procedures |
| sys.objects |
| sys.openkeys |
| sys.parameter_type_usages |
| sys.parameter_xml_schema_collection_usages |
| sys.parameters |
| sys.partition_functions |
| sys.partition_parameters |
| sys.partition_range_values |
| sys.partition_schemes |
| sys.partitions |
| sys.plan_guides |
| sys.procedures |
| sys.remote_logins |
| sys.remote_service_bindings |
| sys.routes |
| sys.schemas |
| sys.securable_classes |
| sys.server_assembly_modules |
| sys.server_event_notifications |
| sys.server_events |
| sys.server_permissions |
| sys.server_principals |
| sys.server_role_members |
| sys.server_sql_modules |
| sys.server_trigger_events |
| sys.server_triggers |
| sys.servers |
| sys.service_broker_endpoints |
| sys.service_contract_message_usages |
| sys.service_contract_usages |
| sys.service_contracts |
| sys.service_message_types |
| sys.service_queue_usages |
| sys.service_queues |
| sys.services |
| sys.soap_endpoints |
| sys.sql_dependencies |
| sys.sql_logins |
| sys.sql_modules |
| sys.stats |
| sys.stats_columns |
| sys.symmetric_keys |
| sys.synonyms |
| sys.sysaltfiles |
| sys.syscacheobjects |
| sys.syscharsets |
| sys.syscolumns |
| sys.syscomments |
| sys.sysconfigures |
| sys.sysconstraints |
| sys.syscurconfigs |
| sys.syscursorcolumns |
| sys.syscursorrefs |
| sys.syscursors |
| sys.syscursortables |
| sys.sysdatabases |
| sys.sysdepends |
| sys.sysdevices |
| sys.sysfilegroups |
| sys.sysfiles |
| sys.sysforeignkeys |
| sys.sysfulltextcatalogs |
| sys.sysindexes |
| sys.sysindexkeys |
| sys.syslanguages |
| sys.syslockinfo |
| sys.syslogins |
| sys.sysmembers |
| sys.sysmessages |
| sys.sysobjects |
| sys.sysoledbusers |
| sys.sysopentapes |
| sys.sysperfinfo |
| sys.syspermissions |
| sys.sysprocesses |
| sys.sysprotects |
| sys.sysreferences |
| sys.sysremotelogins |
| sys.syssegments |
| sys.sysservers |
| sys.system_columns |
| sys.system_components_surface_area_configuration |
| sys.system_internals_allocation_units |
| sys.system_internals_partition_columns |
| sys.system_internals_partitions |
| sys.system_objects |
| sys.system_parameters |
| sys.system_sql_modules |
| sys.system_views |
| sys.systypes |
| sys.sysusers |
| sys.tables |
| sys.tcp_endpoints |
| sys.trace_categories |
| sys.trace_columns |
| sys.trace_event_bindings |
| sys.trace_events |
| sys.trace_subclass_values |
| sys.traces |
| sys.transmission_queue |
| sys.trigger_events |
| sys.triggers |
| sys.type_assembly_usages |
| sys.types |
| sys.user_token |
| sys.via_endpoints |
| sys.views |
| sys.xml_indexes |
| sys.xml_schema_attributes |
| sys.xml_schema_collections |
| sys.xml_schema_component_placements |
| sys.xml_schema_components |
| sys.xml_schema_elements |
| sys.xml_schema_facets |
| sys.xml_schema_model_groups |
| sys.xml_schema_namespaces |
| sys.xml_schema_types |
| sys.xml_schema_wildcard_namespaces |
| sys.xml_schema_wildcards |
+---------------------------------------------------+
Database: msdb
[95 tables]
+---------------------------------------------------+
| dbo.MSdatatype_mappings |
| dbo.MSdbms |
| dbo.MSdbms_datatype |
| dbo.MSdbms_datatype_mapping |
| dbo.MSdbms_map |
| dbo.backupfile |
| dbo.backupfilegroup |
| dbo.backupmediafamily |
| dbo.backupmediaset |
| dbo.backupset |
| dbo.log_shipping_monitor_alert |
| dbo.log_shipping_monitor_error_detail |
| dbo.log_shipping_monitor_history_detail |
| dbo.log_shipping_monitor_primary |
| dbo.log_shipping_monitor_secondary |
| dbo.log_shipping_primaries |
| dbo.log_shipping_primary_databases |
| dbo.log_shipping_primary_secondaries |
| dbo.log_shipping_secondaries |
| dbo.log_shipping_secondary |
| dbo.log_shipping_secondary_databases |
| dbo.logmarkhistory |
| dbo.restorefile |
| dbo.restorefilegroup |
| dbo.restorehistory |
| dbo.sqlagent_info |
| dbo.suspect_pages |
| dbo.sysalerts |
| dbo.syscachedcredentials |
| dbo.syscategories |
| dbo.sysdac_history_internal |
| dbo.sysdac_instances |
| dbo.sysdac_instances_internal |
| dbo.sysdatatypemappings |
| dbo.sysdbmaintplan_databases |
| dbo.sysdbmaintplan_history |
| dbo.sysdbmaintplan_jobs |
| dbo.sysdbmaintplans |
| dbo.sysdownloadlist |
| dbo.sysdtscategories |
| dbo.sysdtslog90 |
| dbo.sysdtspackagefolders90 |
| dbo.sysdtspackagelog |
| dbo.sysdtspackages |
| dbo.sysdtspackages90 |
| dbo.sysdtssteplog |
| dbo.sysdtstasklog |
| dbo.sysjobactivity |
| dbo.sysjobhistory |
| dbo.sysjobs |
| dbo.sysjobs_view |
| dbo.sysjobschedules |
| dbo.sysjobservers |
| dbo.sysjobsteps |
| dbo.sysjobstepslogs |
| dbo.sysmail_account |
| dbo.sysmail_allitems |
| dbo.sysmail_attachments |
| dbo.sysmail_attachments_transfer |
| dbo.sysmail_configuration |
| dbo.sysmail_event_log |
| dbo.sysmail_faileditems |
| dbo.sysmail_log |
| dbo.sysmail_mailattachments |
| dbo.sysmail_mailitems |
| dbo.sysmail_principalprofile |
| dbo.sysmail_profile |
| dbo.sysmail_profileaccount |
| dbo.sysmail_query_transfer |
| dbo.sysmail_send_retries |
| dbo.sysmail_sentitems |
| dbo.sysmail_server |
| dbo.sysmail_servertype |
| dbo.sysmail_unsentitems |
| dbo.sysmaintplan_log |
| dbo.sysmaintplan_logdetail |
| dbo.sysmaintplan_plans |
| dbo.sysmaintplan_subplans |
| dbo.sysnotifications |
| dbo.sysoperators |
| dbo.sysoriginatingservers |
| dbo.sysoriginatingservers_view |
| dbo.sysproxies |
| dbo.sysproxylogin |
| dbo.sysproxyloginsubsystem_view |
| dbo.sysproxysubsystem |
| dbo.sysschedules |
| dbo.sysschedules_localserver_view |
| dbo.syssessions |
| dbo.syssubsystems |
| dbo.systargetservergroupmembers |
| dbo.systargetservergroups |
| dbo.systargetservers |
| dbo.systargetservers_view |
| dbo.systaskids |
+---------------------------------------------------+
Database: ybw
[104 tables]
+---------------------------------------------------+
| dbo.BBSMain |
| dbo.BBSPhoto |
| dbo.BBSRevert |
| dbo.BBSVideo |
| dbo.BBSView |
| dbo.BoardTMP |
| dbo.BuyExpenses |
| dbo.BuyPhone |
| dbo.BuyPlan |
| dbo.BuyPlanRevert |
| dbo.BuyPlanTmp |
| dbo.BuyPlan_Provider |
| dbo.BuyQuality |
| dbo.BuyStorage |
| dbo.BuyStorageB |
| dbo.BuyStorageD |
| dbo.BuyStorageM |
| dbo.BuyStorageTmp |
| dbo.Buy_Requisition |
| dbo.Contact |
| dbo.Customers |
| dbo.D99_CMD |
| dbo.D99_REG |
| dbo.D99_Tmp |
| dbo.ForePlan |
| dbo.ForePlanRevert |
| dbo.ForePlantmp |
| dbo.Graph |
| dbo.InfoAdjunct |
| dbo.InfoMain |
| dbo.InfoPhoto |
| dbo.InfoRevert |
| dbo.MemberData |
| dbo.MusicClass |
| dbo.News |
| dbo.NewsMain |
| dbo.NewsMainPhoto |
| dbo.NewsPhoto |
| dbo.NewsVideo |
| dbo.OrderDetails |
| dbo.Orders |
| dbo.Produce_In_ZC |
| dbo.Produce_Plan_Three |
| dbo.Produce_Plan_Three_Forecast |
| dbo.Produce_Plan_Three_Tmp |
| dbo.Produce_Plan_Tmp_ZC |
| dbo.Produce_Plan_Total_ZC |
| dbo.Produce_Plan_ZC |
| dbo.Produce_Stock_In |
| dbo.Produce_Stock_In_Tmp |
| dbo.Produce_Stock_final |
| dbo.Produce_Stock_final_Tmp |
| dbo.Produce_Workshop_Stock |
| dbo.Produce_Workshop_Stock_Tmp |
| dbo.Product |
| dbo.ProductClass |
| dbo.Province |
| dbo.Requisition |
| dbo.RequisitionRevert |
| dbo.RequisitionTmp |
| dbo.S3_Tmp |
| dbo.SalesStore |
| dbo.SalesStoreBill |
| dbo.SalesStoreDetail |
| dbo.ServerChange |
| dbo.ServerChangePhoto |
| dbo.ShowDayCount |
| dbo.Songs |
| dbo.TUE01 |
| dbo.V_Plan_Workshop_Final_In |
| dbo.V_Produce_In |
| dbo.V_Produce_Plan_In_ZC |
| dbo.VoteAllCount |
| dbo.VoteShow |
| dbo.admin |
| dbo.barcode |
| dbo.buy_cost |
| dbo.buy_inout |
| dbo.ctlm08 |
| dbo.ctlm22 |
| dbo.ctlm23 |
| dbo.dtproperties |
| dbo.invt03 |
| dbo.invt06 |
| dbo.invt06_c |
| dbo.invt06_c_in |
| dbo.invt06_in |
| dbo.invt07 |
| dbo.invt19 |
| dbo.invt97 |
| dbo.labeng |
| dbo.onecolumn |
| dbo.pbcatcol |
| dbo.pbcatedt |
| dbo.pbcatfmt |
| dbo.pbcattbl |
| dbo.pbcatvld |
| dbo.purm55 |
| dbo.quan19 |
| dbo.quan24 |
| dbo.quan26 |
| dbo.voteItem |
| dbo.voteMain |
| dbo.webCount |
+---------------------------------------------------+