当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0166374

漏洞标题：某市敏感局易制毒化学品管理信息系统平台服务器存在“Java 反序列化”漏洞，并getshell

相关厂商：某市敏感局

漏洞作者： 朱元璋

提交时间：2015-12-31 16:11

修复时间：2016-02-12 18:49

公开时间：2016-02-12 18:49

漏洞类型：系统/服务补丁不及时

危害等级：高

自评Rank：15

漏洞状态：已交由第三方合作机构(公安部一所)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-12-31： 细节已通知厂商并且等待厂商处理中
2016-01-04： 厂商已经确认，细节仅向厂商公开
2016-01-14： 细节向核心白帽子及相关领域专家公开
2016-01-24： 细节向普通白帽子公开
2016-02-03： 细节向实习白帽子公开
2016-02-12： 细节向公众公开

简要描述：

警察叔叔，还是你们省的，上回不深入漫游内网，有点感觉会认为我没本事，这次直捣黄龙！

详细说明：

mask 区域 
*****t="01.png" />
02.png



<img src=&quot*****
*****8a2bc3eb77c37fab4dddaa.png*****
1.://**.**.**/存在“Java 反序列化”漏洞_
*****c2ed8e95d8f5f88f1d2f31.png*****
*****马到^*****
*****4e1935345880417d124888.png*****
2.http://**.**.**/admin/test.jsp密码123_
*****e&gt*****
*****YNS_IDCARD, SYNS_PHONE, *****
*****570', '福田区上梅林林园东路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '福田区上梅林梅林路3号蓝天绿^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****0', '深圳市布吉百合山庄5-601#*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****-89966553', '布吉百合山庄5-6*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, 'A4-3 赤湾石油基地，南山区，*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市盐田区邮政支局10号信箱*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****0252', '深圳市罗湖区翠竹路翠*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****52', '深圳市罗湖区翠竹路翠竹*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市福田区福民路石厦北一街蓝*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;26427706', '深圳市南山阳^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '深圳市盐田区邮政支局10号信箱&*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****68', '0755-83701668', *****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市福田区竹子林博园商务酒店*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市福田区竹子林博园商务酒店*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市福田区竹子林博园商务酒店^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市福田区北环大道7001号开^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市福田区北环大道7001号开^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****391155', '南山区妈湾润山工程*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '彩田北路7024#地健大厦*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****64', '深圳市盐田区沙岗圩20号&*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****0098', '广东省深圳市南山区太*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****', '广东省深圳市南山区太子路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;0755-83701668', '福田紫竹*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****^圳市福田区竹子林博园商务酒店九楼*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****361333', '广东省深圳市南山区*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;深圳市福田区北环大道7001号开元大^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****'深圳市福田区北环大道7001号开元^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****391155', '南山区妈湾润山工*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市盐田区盐田港九号小区中铁*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市龙岗区龙城尚景花园D栋80*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市南山区桃园新村2号楼B单元*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****681713', '南山区沙河建工村15^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;深圳市龙岗区中心城龙翔大道园景花*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市上梅林梅林路3号蓝天绿都家园1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市盐田区盐田港九号小区中铁*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9134', '深圳市南山区沙河建工*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市福田区北环大道7001号开元^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市福田区北环大道7001号开元^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '罗湖区翠竹北路松泉公寓9栋3*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '罗湖区翠竹北路松泉公寓9栋3*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '罗湖区翠竹北路松泉公寓9栋3*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '罗湖区翠竹北路松泉公寓9栋316^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '罗湖区翠竹北路松泉公寓9栋3*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市福田区农林路鑫竹苑大厦A^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市 罗湖区翠竹北路松泉公寓9^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市罗湖区翠竹北路松泉公寓9^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市罗湖区翠竹北路松泉公寓9^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市福田区农林路鑫竹苑^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市罗湖区翠竹北路松泉公*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市南山区沙河建工村15*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****91', '深圳市福田区梅林路3号^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;深圳市福田区农林路鑫竹苑大厦A栋1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市福田区农林路鑫竹苑^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****26781858', '市南山区龙联花园*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '深圳市罗湖区翠竹路翠竹大厦１*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市上梅林梅林路3号蓝天绿^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;深圳市上梅林梅林路3号蓝天绿都家^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****4', '广东省深圳市南山区月^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市盐田区盐田港九号小区中铁大^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;深圳市盐田区盐田港九号小区中铁大厦32*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****178', '深圳市南山区前海路桂*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市上梅林梅林路3号蓝天绿都家园1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****圳市上梅林梅林路3号蓝天绿都家园1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市盐田区邮政支局10号信箱*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市盐田区邮政支局10号信箱*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****', '深圳市南山区蛇口新街99号&*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市上梅林梅林路3号蓝^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****5974', '深圳市罗湖区翠竹北路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市上梅林梅林路3号蓝天绿^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市上梅林梅林路3号蓝天^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****96', '福田区深南大道财富广场*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市上梅林梅林路3号蓝天绿都家园1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市盐田区邮政支局10号信箱*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****8', '深圳市福田区北环路南安*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市盐田区邮政支局10号信箱*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市上梅林梅林路3号蓝天绿都家园1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市南山区沙河建工村15^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市上梅林梅林路3号蓝^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****94', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市上梅林梅林路3号蓝^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****80098', '广东省深圳市南山区*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市龙岗区中心城龙翔大道园*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市福田区农林路鑫竹苑大^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市福田区农林路鑫竹苑大^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;深圳市龙岗区中心城龙翔大道园景花园105*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****02268', '深圳市福田区北环路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市上梅林梅林路3号蓝天绿都家园1*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;深圳市盐田区盐田港九号区中铁大厦*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;深圳市盐田区盐田港九号小区中铁大^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市龙岗区龙城尚景花园D^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****'深圳市龙岗区中心城龙翔大道园景花*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市盐田区盐田港九号小区中铁*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****8111', '深圳市盐田区盐田港九*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '广东省深圳市南山区太子路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****83500362', '深圳市福田区北环*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '广东省深圳市南山区太子路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '深圳市罗湖区翠竹路翠竹大厦１*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山区沙河建工村*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****18368', '深圳市福田区北环路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳赤晓工程建设有限公司（赤湾*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;深圳市福田区农林路鑫竹苑大厦A^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋16^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****51', '深圳市南山区桃园新村2^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****5-26909134', '深圳市南山区沙*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市罗湖区滨河路鹿丹大厦^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****570', '福田区上梅林林园东路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市福田区农林路鑫竹苑^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市 罗湖区翠竹北路松^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****0570', '深圳市福田区上梅林梅*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市南山区沙河建工村15号*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市盐田区盐田港九号小区中铁*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市罗湖区翠竹路翠竹大厦*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市盐田区盐田港九号小区中铁*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市盐田区盐田港九号小区中铁*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市盐田区盐田港九号小区*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****391155', '南山区妈湾润山工程*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市龙岗区中心城龙翔大道园景*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****^圳赤晓工程建设有限公司（赤湾港航*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市罗湖区滨河路鹿丹大厦^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****', '0755-25690252', *****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;53053011', '湖南省江华瑶^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '0755-83701668', *****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '0755-83701668', *****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;0755-26685305', '深圳市*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '26909134', '深圳^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9134', '深圳市南山区沙河建工*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市龙岗区中心城龙翔大道园景*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;深圳市福田区竹子林紫竹七道博园商务*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;深圳市龙岗区坪山街道金碧路353号*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市盐田区北山道东33号蔚蓝海*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市福田区农林路鑫竹苑^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****'深圳市龙岗区中心城龙翔大道园景花*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '广西钦州市钦北区大寺镇那^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****206641', '深圳市盐田区邮政支*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市罗湖区滨河路鹿丹大厦*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市龙岗区龙城尚景花园D^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市龙岗区龙城尚景花园D^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市南山区桃园新村2号楼B*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市龙岗龙城尚景花园D栋80*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市龙岗龙城尚景花园D栋80*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****'深圳市龙岗区坪山街道金碧路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
***** '深圳市上梅林梅林路3号蓝天绿都^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市福田区石厦北一街^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****34', '深圳市南山沙河建工村15^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市福田区农林路鑫竹苑大^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '广东省深圳市南山区太子路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '26693354', '深圳^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市南山区桃园新村2号^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市龙岗区龙城尚景花园*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****'深圳市福田区梅林路3号蓝天绿都家^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****206641', '深圳市盐田区邮政支*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****755-26909134', '南山区沙河建*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****, '深圳市龙岗区中心城龙翔大道园景*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '深圳市南山区沙河建工村15号*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '深圳市福田区农林路鑫竹苑^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '深圳市福田区农林路鑫竹苑^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****641', '深圳市盐田区邮政支局*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****039;, '深圳市罗湖水贝二路特力大厦*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****134', '深圳市南山区沙河建工*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****909134', '深圳市南山区沙河建*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****', '广东省深圳市南山区太子路*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9896', '福田区深南大道财富广*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '福田区深南大道财富广场A^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****'广东省深圳市南山区桃园新村2号楼B^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****9;, '福田区竹子林四路博园商务酒店*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;, '深圳市福田区石厦北一街蓝色^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市龙岗区中心城龙翔大道园景花^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****', '深圳市罗湖区翠竹路翠竹*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****252', '深圳市罗湖区翠竹路翠*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市龙岗龙城尚景花园D^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****深圳市盐田区盐田港九号小区中铁大厦32*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****44202', '深圳市罗湖区鹿丹^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;深圳市福田区农林路鑫竹苑大厦A栋1609*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市南山区南油大厦421^*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****52', '深圳市罗湖区翠竹路翠竹*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市罗湖区翠竹路翠竹大厦*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****-25849896', '福田区深南大道*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****#039;, '深圳市南山区沙河建工村15*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****;深圳市盐田区盐田港九号小区中铁大厦32*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '罗湖区翠竹北路松泉公寓9栋3*****
**********
*****YNS_IDCARD, SYNS_PHONE, *****
*****39;, '深圳市罗湖区翠竹路翠竹大厦*****


漏洞证明：

mask 区域 
*****密码: gz*****
*****辑 用^*****
*****572011c7d*****
*****t where t.user_na*****
**********
*******.**p_id='A8aa9802*****
**********
**********
*****d from gz*****
*****pe='*****
*****Y-mm-dd')=*****
**********
**********
**********
*****er_id='Aff8080811a*****
**********
**********
**********
*****局黄埔分局 系^*****
*****^^萝岗区治安大队 ^*****
**********
*****ny t where ******
*****d46947c011d46c4cf6a01c1',*****
**********
**********
**********
*****^^修改^*****
*****2d4 名幸电子（^*****
*****p_name='广州市^*****
**********
*****p_id='Aff8080811c6*****
**********
**********
*****name='得而达水^*****
**********
*****t where t.user_na*****
**********
*****^^买登^*****
*****d from gz*****
*****080811ab409b7011*****
*****pe=*****
*****080811aca259e01*****
**********
*****子表对*****
*****from gzyzd*****
*****81210fde4f01211*****
**********
*****='A402881f81a283a02*****
**********
**********
*****^工购销部 的2条^*****
*****11fb07fee011*****
*****d from gz*****
*****811fb07fee011fc*****
**********
*****from gzyzd*****
*****811fb07fee011fc*****
**********
**********
*****d from gz*****
*****811fb07fee011fd*****
**********
*****from gzyzd*****
*****811fb07fee011fd*****
**********
**********
*****t ******
*****re g,sys*****
******p_id=**.*****
*****039;SY440181*****
**********
**********
**********
*****.**.**p_name='广州*****
*****39;CC440104*****
**********
**********
***** sys_co*****
*****#039; ---44010480 珠^*****
**********
*****.**.**.**p_code li*****
**********
**********
*****0825 操*****
*****^有限公司 1条初*****
*****me ='广州珠江钢*****
*****--*****
*****d from gz*****
*****8080811f63b0a701*****
*****0808121f67e30012*****
**********
**********
**********
*****^^情  comp_id: Aff808*****
******p_id='Aff8080811a*****
*****='Aff8080811ab409b70*****
**********
*****^有限公司 的1^*****
*****124b29c0d012*****
*****d from gz*****
*****8124b29c0d0124d*****
**********
*****from gzyzd*****
*****8124b29c0d0124d*****
**********
*****^有限公司 的1^*****
*****d from gz*****
*****9d276275de01276*****
**********
*****from gzyzd*****
*****9d276275de01276*****
**********
*****ode&*****
**********
*****ode*****
**********
*****140724\autodeploy\g*****
**********
**********
*****==========================*****
**********
*****minist*****
**********
*****iew*****
**********
**********
*****==========================*****
**********
*****?         *****
**********
*****-------------------*****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****                   *****
*****???�*****
**********
**********
*****140724\autodeploy\g*****
**********
**********
*****==========================*****
**********
**********
*****�???*****
**********
*****-------------------*****
*****               SUP*****
*****ser   *****
*****??��?????��*****
**********
**********
*****0724\autodeploy\gdgz*****
**********
**********
*****==========================*****
**********
**********
*****nnect*****
**********
*****eign Address      *****
*******.**.**:0          *****
******.**.**.**:0       *****
*******.**.**:0          *****
*******.**.**:0          *****
*******.**.**:0          *****
*******.**.**:0         *****
*******.**.**:0         *****
*******.**.**:0         *****
*****.**.**:0          *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1521    *****
*******.**.**:1234    *****
*******.**.**:1234    *****
*******.**.**:2345    *****
*******.**.**:5901    *****
*******.**.**:443     *****
*******.**.**:2345    *****
*******.**.**:443     *****
*******.**.**:2345    *****
*******.**.**:443     *****
*******.**.**:2345    *****
*******.**.**:5901    *****
*******.**.**:2345    *****
*******.**.**:5901    *****
******.**.**.**:139  *****
*****.**.**:0          *****
*******.**.**:38344   *****
*******.**.**:38990   *****
*******.**.**:39070   *****
*******.**.**:39126   *****
*******.**.**:55138   *****
*******.**.**:55141   *****
*******.**.**:55142   *****
*****.**.**:0          *****
***** *:*              *****
*****:*                 *****
*****:*                *****
*****                 *****
*****                 *****
*****                 *****
**********
*****0724\autodeploy\gdgz*****
**********
**********
*****==========================*****
**********
**********
**********
*****Config*****
**********
**********
**********
*****. . . . . . *****
**********
*****ix  . . . *****
**********
*****. . . . . .*****
**********
*****ed. . . . *****
**********
*****ed. . . . *****
**********
**********
**********
*****r ��*****
**********
**********
**********
*****. . . . . : Me*****
**********
*****. . . : UT-VPN C*****
**********
*****. . . . . : 00*****
**********
**********
**********
*****r ��*****
**********
**********
**********
*****fic DNS Su*****
**********
*****om BCM5708S NetXtreme I*****
**********
*****. . . . . : 00*****
**********
*****. . . . . *****
**********
*****. . . . . . *****
**********
*****. . . . . . *****
**********
*****. . . . . . *****
**********
*****. . . . . . *****
**********
*****            *****
**********
**********
**********
*****r ��*****
**********
**********
**********
*****. . . . . : Me*****
**********
*****dcom BCM5708S NetXtrem*****
**********
*****. . . . . : 00*****
**********
**********
*****tar*****
**********
**********
*****==========================*****
**********
*****ndows ^*****
**********
*****rience Loo*****
*****tic U*****
*****vent *****
*****er Br*****
*****aphic *****
*****Process *****
***** Cli*****
*****ansaction*****
*****Clie*****
*****ent*****
*****Disk M*****
*****Connec*****
*****on Awaren*****
***** and*****
*****t Sp*****
*****ted S*****
*****dure Cal*****
*****ccounts*****
*****rve*****
*****ware De*****
*****nt Noti*****
*****chedu*****
*****etBIOS*****
*****al Se*****
*****ows *****
*****ment Inst*****
*****ows *****
***** Confi*****
*****stat*****
***** Cloud *****
*****^^�??*****
**********
*****???�*****
**********
**********
*****0724\autodeploy\gdgz*****

修复方案：

加强安全意识

版权声明：转载请注明来源 朱元璋@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：10

确认时间：2016-01-04 09:46

厂商回复：

感谢提交！！
验证确认所描述的问题，已通知其修复。

最新状态：

暂无

漏洞评价：

评价