当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0155824

漏洞标题：某省敏感部门某居住人申报系统设计缺陷涉及居民信息

相关厂商：某省敏感部门

漏洞作者： 路人甲

提交时间：2015-11-25 16:16

修复时间：2016-01-13 16:18

公开时间：2016-01-13 16:18

漏洞类型：设计缺陷/逻辑错误

危害等级：高

自评Rank：20

漏洞状态：已交由第三方合作机构(公安部一所)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-11-25： 细节已通知厂商并且等待厂商处理中
2015-11-29： 厂商已经确认，细节仅向厂商公开
2015-12-09： 细节向核心白帽子及相关领域专家公开
2015-12-19： 细节向普通白帽子公开
2015-12-29： 细节向实习白帽子公开
2016-01-13： 细节向公众公开

简要描述：

设计缺陷求帮忙打码，感谢

详细说明：

mask 区域 
1.://**.**.**//**.**.**.**:9081/szpt/web/czwsb_do.jspLOGINED=NO_
*****^福建公^*****
*****cb2c78a0a340.png" alt=&quo*****
*****^^，^*****
*****0eb4b04a1ca3.png" alt=&quo*****
*****向服务端^*****
*****ode*****
2.://**.**.**//**.**.**.**:9081/szpt/public/getclientset_evalstr.jsp HTTP/1.1_
*****t: *****
*****uage: *****
*****dj.jsp?procmode=PM*****
*****on/x-www-for*****
*****: gzip, *****
*****IE 9.0; Windows NT 6*****
*****.**.*******
*****ength*****
***** Keep-*****
***** no-*****
*****rZAZklIgj6osNy*****
**********
*****7701$u77F3$u72EE$u5E02%27%20or%20PARENTCODE%20like%20%273501%25%27%20or%20PARENTCODE%20like%20%273505%25%27%20%20or%20PARENTCODE%20like%20%273509%25%27%20or%20PARENTCODE%20like%20%273508%25%27%20or%20PARENTCO*****
*****de&g*****
*****de编码与正常语句的混合体，百^*****
*****ode*****
3.://**.**.**//**.**.**.**:9081/szpt/public/getclientset_evalstr.jsp HTTP/1.1_
*****plication/x*****
*****on/x-www-for*****
*****uage: *****
*****IE 9.0; Windows NT 6*****
*****: gzip, *****
***** Keep-*****
*****.**.*******
*****ength*****
*****rZAZklIgj6osNy*****
**********
*****u006D+%24u0076%24u0024%24u0076%24u0065%24u0072%24u00*****
*****de&g*****
*****^库^*****
*****b3c674131810.png" alt=&quo*****

漏洞证明：

mask 区域 
*****^于50000*****
*****d11f963d0193.png" alt=&quo*****
*****ode*****
*****ABLE_NAME","var*****
*****UM_ROWS","varc*****
*****sRo*****
*****sQuery*****
*****ot;T_CHECK_L*****
*****,"347*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LDRK_HO*****
*****,"519*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LDRK_IN*****
*****,"197*****
*****ddRow(*****
*****sQuery*****
*****;T_LDRK_INFO_*****
*****,"139*****
*****ddRow(*****
*****sQuery*****
*****_LDRK_INFO_BZ_*****
*****,"372*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LDRK_PE*****
*****,"140*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LDRK_TB*****
*****,"283*****
*****ddRow(*****
*****sQuery*****
*****quot;T_LGY_*****
*****,"507*****
*****ddRow(*****
*****sQuery*****
*****quot;T_LGY_*****
*****,"654*****
*****ddRow(*****
*****sQuery*****
*****;T_LGY_JNLK20*****
*****,"120*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JNL*****
*****,"786*****
*****ddRow(*****
*****sQuery*****
*****;T_LGY_JNLK_2*****
*****,"786*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JNL*****
*****,"189*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JNL*****
*****quot;186873*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JNL*****
*****,"866*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JNL*****
*****,"833*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JNL*****
*****,"940*****
*****ddRow(*****
*****sQuery*****
*****quot;T_LGY_*****
*****,"718*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_JWL*****
*****,"689*****
*****ddRow(*****
*****sQuery*****
*****ot;T_LGY_LKX*****
*****,"255*****
*****ddRow(*****
*****sQuery*****
*****quot;T_LGY_*****
*****,"582*****
*****ddRow(*****
*****sQuery*****
*****quot;T_NAME*****
*****,"180*****
*****ddRow(*****
*****sQuery*****
*****,"T_T*****
*****,"612*****
*****ddRow(*****
*****sQuery*****
*****ot;T_WWFW_SF*****
*****,"262*****
*****ddRow(*****
**********
*****de&g*****
*****^^*****
*****前20条^*****
*****1ade9be7f62e.png" alt=&quo*****
*****ode*****
*****;350900110000*****
*****50981101420110*****
*****,"张*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1982-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****uot;居民^*****
*****t;35220219820*****
*****(16,&quot*****
*****(17,&quot*****
*****t;福建省^*****
*****(19,&quot*****
*****^^镇兴龙街^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2011-06-10 *****
*****t;2011-06-11 *****
*****9,"fa*****
*****(30,&quot*****
*****(31,&quot*****
*****(32,&quot*****
*****t;2011-06-10 *****
*****"35098*****
*****(35,&quot*****
*****6,"fa*****
*****(37,&quot*****
*****uot;13076842*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****2,"^*****
*****t;2011-06-10 *****
*****t;2011-06-10 *****
*****t;2011-06-11 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35090011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350900110000*****
*****52227002920110*****
*****quot;陈发*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1964-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****uot;居民^*****
*****t;35222719640*****
*****(16,&quot*****
*****(17,&quot*****
*****t;福建省^*****
*****(19,&quot*****
*****^^镇八一六^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2011-06-10 *****
*****t;2011-06-11 *****
*****古田县华^*****
*****(30,&quot*****
*****(31,&quot*****
*****(32,&quot*****
*****t;2011-06-10 *****
*****"35222*****
*****(35,&quot*****
*****6,"gt*****
*****(37,&quot*****
*****uot;13076842*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****2,"^*****
*****t;2011-06-10 *****
*****t;2011-06-10 *****
*****(45,&quot*****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35090011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50402001820081*****
*****quot;林佳*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1989-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35060319890*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****州市龙文区蓝^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-23 *****
*****9,"00*****
*****0,"00*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****t;2008-11-23 *****
*****6,"00*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-23 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****35040011900000*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50481001920081*****
*****quot;王明*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1973-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;52263619730*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****9,"81*****
*****0,"81*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35048*****
*****t;2008-11-22 *****
*****6,"81*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****35040011900000*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50428001620081*****
*****,"连*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1964-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35010219640*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2009-05-22 *****
*****9,"80*****
*****(30,&quot*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****(35,&quot*****
*****6,"80*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****(45,&quot*****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****35040011900000*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50426001820081*****
*****quot;许新*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1966-0*****
*****t;坂面乡^*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35042619660*****
*****(16,&quot*****
*****(17,&quot*****
*****t;坂面乡^*****
*****(19,&quot*****
*****"王^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****"陈^*****
*****"陈^*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****t;2008-11-22 *****
*****(36,&quot*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50403002720081*****
*****quot;李定*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1986-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35052419860*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****^三明市三元^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-23 *****
*****9,"03*****
*****0,"00*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****t;2008-11-23 *****
*****(36,&quot*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-23 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50428001920081*****
*****quot;赵仕*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1958-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;13243019580*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****^关大街259号十八^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****9,"80*****
*****0,"80*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****t;2008-11-24 *****
*****6,"80*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50427001720081*****
*****quot;李海*****
*****,"lih*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1984-0*****
*****杨营镇李^*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;37083219840*****
*****(16,&quot*****
*****(17,&quot*****
*****杨营镇李^*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-12-07 *****
*****9,"27*****
*****0,"27*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****t;2008-12-07 *****
*****6,"27*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-12-07 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****35040011900000*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50429000920081*****
*****quot;汪春*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1983-1*****
*****(10,&quot*****
*****(11,&quot*****
*****2,"38*****
*****(13,&quot*****
*****"身^*****
*****t;36012219831*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2009-06-28 *****
*****9,"29*****
*****(30,&quot*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****(35,&quot*****
*****6,"29*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****(45,&quot*****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50403002120081*****
*****quot;姜洪*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1983-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35040319830*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****9,"00*****
*****0,"00*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****t;2008-11-24 *****
*****6,"00*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50403002720081*****
*****quot;邱升*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1985-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35042419850*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****化县湖村镇石^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****9,"00*****
*****0,"00*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****t;2008-11-22 *****
*****6,"00*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****35040011900000*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50481003420081*****
*****quot;邓进*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1958-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35042419580*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****宁化县湖^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2009-02-11 *****
*****9,"81*****
*****0,"81*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35048*****
*****t;2009-02-11 *****
*****(36,&quot*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2009-02-11 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50403002120081*****
*****quot;蔡向*****
*****quot;caixia*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1969-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35012519690*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****9,"00*****
*****0,"00*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****t;2008-11-24 *****
*****6,"00*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50425001220081*****
*****quot;江成*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1981-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****"身^*****
*****t;35010419810*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****^^州市仓山区^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****"唐^*****
*****"唐^*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****t;2008-11-24 *****
*****(36,&quot*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-24 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50402000220081*****
*****quot;朱晓*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1971-1*****
*****(10,&quot*****
*****(11,&quot*****
*****2,"21*****
*****(13,&quot*****
*****"身^*****
*****t;35058219711*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****^市池店镇溜石^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2009-03-20 *****
*****9,"02*****
*****(30,&quot*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****(35,&quot*****
*****6,"02*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****(45,&quot*****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****35040011900000*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50402004420081*****
*****quot;徐小*****
*****quot;xuxiao*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1972-1*****
*****(10,&quot*****
*****(11,&quot*****
*****2,"86*****
*****(13,&quot*****
*****"身^*****
*****t;33012119721*****
*****(16,&quot*****
*****(17,&quot*****
*****(18,&quot*****
*****(19,&quot*****
*****(20,&quot*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2009-03-17 *****
*****9,"02*****
*****(30,&quot*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35040*****
*****(35,&quot*****
*****6,"02*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****(45,&quot*****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350400110000*****
*****50427001420081*****
*****quot;陈景*****
*****quot;chenji*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1975-1*****
*****t;福建省^*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****uot;其他^*****
*****"1975-*****
*****(16,&quot*****
*****(17,&quot*****
*****t;福建省^*****
*****(19,&quot*****
*****t;平湖镇^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****9,"27*****
*****0,"27*****
*****"牡^*****
*****(32,&quot*****
*****t;2008-11-21 *****
*****"35042*****
*****t;2008-11-22 *****
*****(36,&quot*****
*****(37,&quot*****
*****(38,&quot*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****(42,&quot*****
*****t;2008-11-21 *****
*****t;2008-11-21 *****
*****t;2008-11-22 *****
*****(46,&quot*****
*****(47,&quot*****
*****(48,&quot*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35040011000000*****
*****(69,&quot*****
*****ddRow(*****
*****sQuery*****
*****;350900110000*****
*****50999079920110*****
*****quot;倪成*****
*****(3,"*****
*****(4,"*****
*****(5,"*****
*****(6,"*****
*****(7,"*****
*****(8,"*****
*****quot;1983-0*****
*****(10,&quot*****
*****(11,&quot*****
*****(12,&quot*****
*****(13,&quot*****
*****uot;居民^*****
*****t;35220219830*****
*****(16,&quot*****
*****(17,&quot*****
*****t;福建省^*****
*****(19,&quot*****
*****^棠镇倪下^*****
*****(21,&quot*****
*****(22,&quot*****
*****(23,&quot*****
*****(24,&quot*****
*****(25,&quot*****
*****(26,&quot*****
*****t;2011-06-10 *****
*****t;2011-06-11 *****
*****t;东侨长^*****
*****(30,&quot*****
*****(31,&quot*****
*****(32,&quot*****
*****t;2011-06-10 *****
*****"35099*****
*****(35,&quot*****
*****6,"dq*****
*****(37,&quot*****
*****uot;13076842*****
*****(39,&quot*****
*****(40,&quot*****
*****(41,&quot*****
*****2,"^*****
*****t;2011-06-10 *****
*****t;2011-06-10 *****
*****t;2011-06-11 *****
*****(46,&quot*****
*****(47,&quot*****
*****8,"24*****
*****(49,&quot*****
*****(50,&quot*****
*****(51,&quot*****
*****(52,&quot*****
*****(53,&quot*****
*****(54,&quot*****
*****(55,&quot*****
*****(56,&quot*****
*****(57,&quot*****
*****(58,&quot*****
*****(59,&quot*****
*****(60,&quot*****
*****(61,&quot*****
*****(62,&quot*****
*****(63,&quot*****
*****(64,&quot*****
*****(65,&quot*****
*****(66,&quot*****
*****(67,&quot*****
*****35090011000000*****
*****(69,&quot*****
*****ddRow(*****
**********
*****de&g*****
*****^^*****

修复方案：

修改程序

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：7

确认时间：2015-11-29 16:16

厂商回复：

验证确认所描述的问题，已通知其修复。

最新状态：

暂无

漏洞评价：

评价