当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2016-0167181

漏洞标题：天天快递某站存在SQL注入（涉及8库948表）

相关厂商：ttkdex.com

漏洞作者： 路人甲

提交时间：2016-01-04 14:33

修复时间：2016-02-12 18:49

公开时间：2016-02-12 18:49

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：15

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2016-01-04： 细节已通知厂商并且等待厂商处理中
2016-01-04： 厂商已经确认，细节仅向厂商公开
2016-01-14： 细节向核心白帽子及相关领域专家公开
2016-01-24： 细节向普通白帽子公开
2016-02-03： 细节向实习白帽子公开
2016-02-12： 细节向公众公开

简要描述：


快递

详细说明：

http://www.ttkexpress.us/Page/Logistics/InspectMessage.aspx?StorageNumber=1


StorageNumber 存在注入

available databases [8]:
[*] master
[*] model
[*] msdb
[*] ReportServer
[*] ReportServerTempDB
[*] tempdb
[*] TianTianKuaiDi
[*] TianTianKuaiDiTest

漏洞证明：

Database: ReportServerTempDB
[13 tables]
+-----------------------------------------------------------+
| ChunkData                                                 |
| ChunkSegmentMapping                                       |
| DBUpgradeHistory                                          |
| ExecutionCache                                            |
| PersistedStream                                           |
| SegmentedChunk                                            |
| SegmentedChunk                                            |
| SessionData                                               |
| SessionLock                                               |
| SnapshotData                                              |
| TempCatalog                                               |
| TempDataSets                                              |
| TempDataSources                                           |
+-----------------------------------------------------------+
Database: tempdb
[2 tables]
+-----------------------------------------------------------+
| #A5349ADE                                                 |
| #A628BF17                                                 |
+-----------------------------------------------------------+
Database: TianTianKuaiDiTest
[140 tables]
+-----------------------------------------------------------+
| AboutUs                                                   |
| Announcement                                              |
| CollectRate                                               |
| ConsignProcutDetail                                       |
| ConsignmentDetail                                         |
| ConsignmentDetail                                         |
| ConsignmentInMessage                                      |
| ConsignmentOutMessage                                     |
| ConsignmentTrack                                          |
| ConsumerRecord                                            |
| CostRate                                                  |
| CouponProvide                                             |
| CouponSet                                                 |
| CustomerAddress                                           |
| CustomerInfo                                              |
| Desponst                                                  |
| HelperCenter                                              |
| If_CustomerNumber                                         |
| If_CustomerNumber                                         |
| InStock                                                   |
| InspectionApply                                           |
| Integral                                                  |
| InterfaceForOtherSite                                     |
| InterfaceHaitao                                           |
| LeaveWord                                                 |
| LogRecord                                                 |
| Menu                                                      |
| ProductType                                               |
| ProductTypeSmall                                          |
| PurchaseAgentDetail                                       |
| PurchaseAgentDetail                                       |
| QuestionType                                              |
| QuickAnswer                                               |
| ReWardRecord                                              |
| RechargeRecord                                            |
| RecommandConsignAmount                                    |
| RefundAmount                                              |
| RegionsCurrency                                           |
| ReleaseList                                               |
| ReturnGoodNote                                            |
| ReturnGoodsDetail                                         |
| ReturnGoodsDetail                                         |
| SerialNo                                                  |
| Shop_OrderDetail                                          |
| Shop_OrderDetail                                          |
| Shop_Product                                              |
| Shop_ShoppingCart                                         |
| SmsReceive                                                |
| SmsSend                                                   |
| StorageForecast                                           |
| StoragePrice                                              |
| StorageSingle                                             |
| SysEmail                                                  |
| SysTransportCode                                          |
| Sys_MessageQueue                                          |
| Sys_Record                                                |
| Sys_Set                                                   |
| SystemConsignment                                         |
| SystemCustomerMessage                                     |
| SystemDiscount                                            |
| SystemMaintenance                                         |
| SystemSet                                                 |
| SystemState                                               |
| SystemTransportPriceNew                                   |
| SystemTrnasportPrice                                      |
| T_AbandonGood                                             |
| T_Award                                                   |
| T_ClaimsRecord                                            |
| T_CustomerQuestion                                        |
| T_Customer_Q_Detail                                       |
| T_EnsureMoney                                             |
| T_Letter                                                  |
| T_Links                                                   |
| T_MemberShipLevel                                         |
| T_MessageTip                                              |
| T_OtherSiteCode                                           |
| T_PaymentRecord                                           |
| T_ServiceListNew                                          |
| T_ServiceListNew                                          |
| T_ServiceWarehouse                                        |
| Track                                                     |
| TrackReply                                                |
| TrackStation                                              |
| TransportPriceNew                                         |
| TransportPriceNew                                         |
| UPSConsign                                                |
| UserInfo                                                  |
| V_AbandonGood                                             |
| V_AbandonSingle                                           |
| V_ClaimRecordCustomer                                     |
| V_CollectRate                                             |
| V_ConsignmentCustomer                                     |
| V_ConsignmentDetail                                       |
| V_ConsignmentProductDetail                                |
| V_CostRate                                                |
| V_CouponProvide                                           |
| V_CouponSet                                               |
| V_CustomerQuestionDetail                                  |
| V_CustomerQuestionDetail                                  |
| V_For55haitao                                             |
| V_ForecastCustomer                                        |
| V_ForecastStorageCS                                       |
| V_InspectionCustomerNew                                   |
| V_InspectionCustomerNew                                   |
| V_MessageTip                                              |
| V_OrderDetail                                             |
| V_PayTaxCustomer                                          |
| V_PurchaseAgent                                           |
| V_RecommandAccount                                        |
| V_RefundCustomer                                          |
| V_Reports_BusinessConsignment                             |
| V_Reports_Consignment                                     |
| V_Reports_ConsumerRecord                                  |
| V_Reports_MainNumber                                      |
| V_Reports_RechargeRecord                                  |
| V_Reports_RefundAmount                                    |
| V_Reports_StorageSingle                                   |
| V_ReturnGoodCustomer                                      |
| V_ReturnGoodsStorage                                      |
| V_ReturnTax                                               |
| V_SeInventoryInquires                                     |
| V_StorageCustomer                                         |
| V_StorageForecastWarehouse                                |
| V_SysTransportWarehouse                                   |
| V_TaxRebate                                               |
| V_UPSCustomer                                             |
| V_getSamllType                                            |
| Warehouse                                                 |
| authority                                                 |
| channelManage                                             |
| cmd                                                       |
| consignmentNumber                                         |
| distinctConsignment                                       |
| numberRecord                                              |
| pangolin_test_table                                       |
| paypalCharge                                              |
| proviceCityArea                                           |
| setConsignmentNumber                                      |
| sqlmapoutput                                              |
| taxRebate                                                 |
+-----------------------------------------------------------+
Database: msdb
[213 tables]
+-----------------------------------------------------------+
| MSdatatype_mappings                                       |
| MSdbms_datatype_mapping                                   |
| MSdbms_datatype_mapping                                   |
| MSdbms_datatype_mapping                                   |
| MSdbms_map                                                |
| backupfilegroup                                           |
| backupfilegroup                                           |
| backupmediafamily                                         |
| backupmediaset                                            |
| backupset                                                 |
| log_shipping_monitor_alert                                |
| log_shipping_monitor_error_detail                         |
| log_shipping_monitor_history_detail                       |
| log_shipping_monitor_primary                              |
| log_shipping_monitor_secondary                            |
| log_shipping_primaries                                    |
| log_shipping_primary_databases                            |
| log_shipping_primary_secondaries                          |
| log_shipping_secondaries                                  |
| log_shipping_secondary_databases                          |
| log_shipping_secondary_databases                          |
| logmarkhistory                                            |
| msdb_version                                              |
| restorefilegroup                                          |
| restorefilegroup                                          |
| restorehistory                                            |
| sqlagent_info                                             |
| suspect_pages                                             |
| sysalerts_performance_counters_view                       |
| sysalerts_performance_counters_view                       |
| syscachedcredentials                                      |
| syscategories                                             |
| syscollector_blobs_internal                               |
| syscollector_collection_items_internal                    |
| syscollector_collection_items_internal                    |
| syscollector_collection_sets_internal                     |
| syscollector_collection_sets_internal                     |
| syscollector_collector_types_internal                     |
| syscollector_collector_types_internal                     |
| syscollector_config_store_internal                        |
| syscollector_config_store_internal                        |
| syscollector_execution_log_full                           |
| syscollector_execution_log_full                           |
| syscollector_execution_log_internal                       |
| syscollector_execution_stats_internal                     |
| syscollector_execution_stats_internal                     |
| syscollector_tsql_query_collector                         |
| sysdac_history_internal                                   |
| sysdac_instances_internal                                 |
| sysdac_instances_internal                                 |
| sysdatatypemappings                                       |
| sysdbmaintplan_databases                                  |
| sysdbmaintplan_history                                    |
| sysdbmaintplan_jobs                                       |
| sysdbmaintplans                                           |
| sysdownloadlist                                           |
| sysdtslog90                                               |
| sysjobactivity                                            |
| sysjobhistory                                             |
| sysjobs_view                                              |
| sysjobs_view                                              |
| sysjobschedules                                           |
| sysjobservers                                             |
| sysjobstepslogs                                           |
| sysjobstepslogs                                           |
| sysmail_account                                           |
| sysmail_allitems                                          |
| sysmail_attachments_transfer                              |
| sysmail_attachments_transfer                              |
| sysmail_configuration                                     |
| sysmail_event_log                                         |
| sysmail_faileditems                                       |
| sysmail_log                                               |
| sysmail_mailattachments                                   |
| sysmail_mailitems                                         |
| sysmail_principalprofile                                  |
| sysmail_profileaccount                                    |
| sysmail_profileaccount                                    |
| sysmail_query_transfer                                    |
| sysmail_send_retries                                      |
| sysmail_sentitems                                         |
| sysmail_server                                            |
| sysmail_servertype                                        |
| sysmail_unsentitems                                       |
| sysmaintplan_logdetail                                    |
| sysmaintplan_logdetail                                    |
| sysmaintplan_plans                                        |
| sysmaintplan_subplans                                     |
| sysmanagement_shared_registered_servers_internal          |
| sysmanagement_shared_registered_servers_internal          |
| sysmanagement_shared_server_groups_internal               |
| sysmanagement_shared_server_groups_internal               |
| sysnotifications                                          |
| sysoperators                                              |
| sysoriginatingservers_view                                |
| sysoriginatingservers_view                                |
| syspolicy_conditions_internal                             |
| syspolicy_conditions_internal                             |
| syspolicy_configuration_internal                          |
| syspolicy_configuration_internal                          |
| syspolicy_execution_internal                              |
| syspolicy_facet_events                                    |
| syspolicy_management_facets                               |
| syspolicy_object_sets_internal                            |
| syspolicy_object_sets_internal                            |
| syspolicy_policies_internal                               |
| syspolicy_policies_internal                               |
| syspolicy_policy_categories_internal                      |
| syspolicy_policy_categories_internal                      |
| syspolicy_policy_category_subscriptions_internal          |
| syspolicy_policy_category_subscriptions_internal          |
| syspolicy_policy_execution_history_details_internal       |
| syspolicy_policy_execution_history_details_internal       |
| syspolicy_policy_execution_history_details_internal       |
| syspolicy_policy_execution_history_internal               |
| syspolicy_system_health_state_internal                    |
| syspolicy_system_health_state_internal                    |
| syspolicy_target_set_levels_internal                      |
| syspolicy_target_set_levels_internal                      |
| syspolicy_target_sets_internal                            |
| syspolicy_target_sets_internal                            |
| sysproxies                                                |
| sysproxylogin                                             |
| sysproxyloginsubsystem_view                               |
| sysproxysubsystem                                         |
| sysschedules_localserver_view                             |
| sysschedules_localserver_view                             |
| syssessions                                               |
| sysssislog                                                |
| sysssispackagefolders                                     |
| sysssispackages                                           |
| syssubsystems                                             |
| systargetservergroupmembers                               |
| systargetservergroups                                     |
| systargetservers_view                                     |
| systargetservers_view                                     |
| systaskids                                                |
| sysutility_mi_configuration_internal                      |
| sysutility_mi_configuration_internal                      |
| sysutility_mi_cpu_stage_internal                          |
| sysutility_mi_dac_execution_statistics_internal           |
| sysutility_mi_session_statistics_internal                 |
| sysutility_mi_smo_objects_to_collect_internal             |
| sysutility_mi_smo_properties_to_collect_internal          |
| sysutility_mi_smo_stage_internal                          |
| sysutility_mi_volumes_stage_internal                      |
| sysutility_ucp_aggregated_dac_health_internal             |
| sysutility_ucp_aggregated_dac_health_internal             |
| sysutility_ucp_aggregated_mi_health_internal              |
| sysutility_ucp_aggregated_mi_health_internal              |
| sysutility_ucp_computer_cpu_health_internal               |
| sysutility_ucp_computer_cpu_health_internal               |
| sysutility_ucp_computer_cpu_utilizations                  |
| sysutility_ucp_computer_policies                          |
| sysutility_ucp_computers_stub                             |
| sysutility_ucp_computers_stub                             |
| sysutility_ucp_configuration_internal                     |
| sysutility_ucp_configuration_internal                     |
| sysutility_ucp_cpu_utilization_stub                       |
| sysutility_ucp_dac_cpu_utilizations                       |
| sysutility_ucp_dac_database_file_space_health             |
| sysutility_ucp_dac_database_file_space_utilizations       |
| sysutility_ucp_dac_file_space_health_internal             |
| sysutility_ucp_dac_health_internal                        |
| sysutility_ucp_dac_health_internal                        |
| sysutility_ucp_dac_policies                               |
| sysutility_ucp_dac_policy_type                            |
| sysutility_ucp_dac_volume_space_utilizations              |
| sysutility_ucp_dacs_stub                                  |
| sysutility_ucp_database_files                             |
| sysutility_ucp_databases_stub                             |
| sysutility_ucp_databases_stub                             |
| sysutility_ucp_datafiles_stub                             |
| sysutility_ucp_datafiles_stub                             |
| sysutility_ucp_deployed_dacs                              |
| sysutility_ucp_filegroups_stub                            |
| sysutility_ucp_filegroups_stub                            |
| sysutility_ucp_filegroups_with_policy_violations_internal |
| sysutility_ucp_health_policies_internal                   |
| sysutility_ucp_instance_policies                          |
| sysutility_ucp_instance_policy_type                       |
| sysutility_ucp_instances                                  |
| sysutility_ucp_logfiles_stub                              |
| sysutility_ucp_logfiles_stub                              |
| sysutility_ucp_managed_instances_internal                 |
| sysutility_ucp_managed_instances_internal                 |
| sysutility_ucp_mi_cpu_utilizations                        |
| sysutility_ucp_mi_database_file_space_utilizations        |
| sysutility_ucp_mi_database_health_internal                |
| sysutility_ucp_mi_database_health_internal                |
| sysutility_ucp_mi_file_space_health_internal              |
| sysutility_ucp_mi_file_space_health_internal              |
| sysutility_ucp_mi_health_internal                         |
| sysutility_ucp_mi_health_internal                         |
| sysutility_ucp_mi_volume_space_health_internal            |
| sysutility_ucp_mi_volume_space_health_internal            |
| sysutility_ucp_mi_volume_space_utilizations               |
| sysutility_ucp_policies                                   |
| sysutility_ucp_policy_check_conditions_internal           |
| sysutility_ucp_policy_check_conditions_internal           |
| sysutility_ucp_policy_configuration                       |
| sysutility_ucp_policy_target_conditions_internal          |
| sysutility_ucp_policy_target_conditions_internal          |
| sysutility_ucp_policy_violations_internal                 |
| sysutility_ucp_policy_violations_internal                 |
| sysutility_ucp_processing_state_internal                  |
| sysutility_ucp_smo_servers_stub                           |
| sysutility_ucp_snapshot_partitions_internal               |
| sysutility_ucp_space_utilization_stub                     |
| sysutility_ucp_supported_object_types_internal            |
| sysutility_ucp_utility_space_utilization                  |
| sysutility_ucp_volumes_stub                               |
| sysutility_ucp_volumes_stub                               |
+-----------------------------------------------------------+
Database: ReportServer
[39 tables]
+-----------------------------------------------------------+
| ActiveSubscriptions                                       |
| Batch                                                     |
| CachePolicy                                               |
| Catalog                                                   |
| ChunkData                                                 |
| ChunkSegmentMapping                                       |
| ConfigurationInfo                                         |
| DBUpgradeHistory                                          |
| DataSets                                                  |
| DataSource                                                |
| Event                                                     |
| ExecutionLog2                                             |
| ExecutionLog2                                             |
| ExecutionLog3                                             |
| ExecutionLogStorage                                       |
| ExtendedDataSets                                          |
| ExtendedDataSources                                       |
| History                                                   |
| Keys                                                      |
| ModelDrill                                                |
| ModelItemPolicy                                           |
| ModelPerspective                                          |
| Notifications                                             |
| Policies                                                  |
| PolicyUserRole                                            |
| ReportSchedule                                            |
| Roles                                                     |
| RunningJobs                                               |
| Schedule                                                  |
| SecData                                                   |
| SegmentedChunk                                            |
| SegmentedChunk                                            |
| ServerParametersInstance                                  |
| ServerUpgradeHistory                                      |
| SnapshotData                                              |
| SubscriptionsBeingDeleted                                 |
| SubscriptionsBeingDeleted                                 |
| UpgradeInfo                                               |
| Users                                                     |
+-----------------------------------------------------------+
Database: master
[410 tables]
+-----------------------------------------------------------+
| INFORMATION_SCHEMA.CHECK_CONSTRAINTS                      |
| INFORMATION_SCHEMA.COLUMNS                                |
| INFORMATION_SCHEMA.COLUMN_DOMAIN_USAGE                    |
| INFORMATION_SCHEMA.COLUMN_PRIVILEGES                      |
| INFORMATION_SCHEMA.CONSTRAINT_COLUMN_USAGE                |
| INFORMATION_SCHEMA.CONSTRAINT_TABLE_USAGE                 |
| INFORMATION_SCHEMA.DOMAINS                                |
| INFORMATION_SCHEMA.DOMAIN_CONSTRAINTS                     |
| INFORMATION_SCHEMA.KEY_COLUMN_USAGE                       |
| INFORMATION_SCHEMA.PARAMETERS                             |
| INFORMATION_SCHEMA.REFERENTIAL_CONSTRAINTS                |
| INFORMATION_SCHEMA.ROUTINES                               |
| INFORMATION_SCHEMA.ROUTINE_COLUMNS                        |
| INFORMATION_SCHEMA.SCHEMATA                               |
| INFORMATION_SCHEMA.SEQUENCES                              |
| INFORMATION_SCHEMA.TABLES                                 |
| INFORMATION_SCHEMA.TABLE_CONSTRAINTS                      |
| INFORMATION_SCHEMA.TABLE_PRIVILEGES                       |
| INFORMATION_SCHEMA.VIEWS                                  |
| INFORMATION_SCHEMA.VIEW_COLUMN_USAGE                      |
| INFORMATION_SCHEMA.VIEW_TABLE_USAGE                       |
| MSreplication_options                                     |
| spt_fallback_db                                           |
| spt_fallback_dev                                          |
| spt_fallback_usg                                          |
| spt_monitor                                               |
| spt_values                                                |
| sys.all_columns                                           |
| sys.all_objects                                           |
| sys.all_parameters                                        |
| sys.all_sql_modules                                       |
| sys.all_views                                             |
| sys.allocation_units                                      |
| sys.assemblies                                            |
| sys.assembly_files                                        |
| sys.assembly_modules                                      |
| sys.assembly_references                                   |
| sys.assembly_types                                        |
| sys.asymmetric_keys                                       |
| sys.availability_databases_cluster                        |
| sys.availability_group_listener_ip_addresses              |
| sys.availability_group_listeners                          |
| sys.availability_groups_cluster                           |
| sys.availability_groups_cluster                           |
| sys.availability_read_only_routing_lists                  |
| sys.availability_replicas                                 |
| sys.backup_devices                                        |
| sys.certificates                                          |
| sys.change_tracking_databases                             |
| sys.change_tracking_tables                                |
| sys.check_constraints                                     |
| sys.column_store_dictionaries                             |
| sys.column_store_segments                                 |
| sys.column_type_usages                                    |
| sys.column_xml_schema_collection_usages                   |
| sys.columns                                               |
| sys.computed_columns                                      |
| sys.configurations                                        |
| sys.conversation_endpoints                                |
| sys.conversation_groups                                   |
| sys.conversation_priorities                               |
| sys.credentials                                           |
| sys.crypt_properties                                      |
| sys.cryptographic_providers                               |
| sys.data_spaces                                           |
| sys.database_audit_specification_details                  |
| sys.database_audit_specifications                         |
| sys.database_files                                        |
| sys.database_filestream_options                           |
| sys.database_mirroring_endpoints                          |
| sys.database_mirroring_endpoints                          |
| sys.database_mirroring_witnesses                          |
| sys.database_permissions                                  |
| sys.database_principals                                   |
| sys.database_recovery_status                              |
| sys.database_role_members                                 |
| sys.databases                                             |
| sys.default_constraints                                   |
| sys.destination_data_spaces                               |
| sys.dm_audit_actions                                      |
| sys.dm_audit_class_type_map                               |
| sys.dm_broker_activated_tasks                             |
| sys.dm_broker_connections                                 |
| sys.dm_broker_forwarded_messages                          |
| sys.dm_broker_queue_monitors                              |
| sys.dm_cdc_errors                                         |
| sys.dm_cdc_log_scan_sessions                              |
| sys.dm_clr_appdomains                                     |
| sys.dm_clr_loaded_assemblies                              |
| sys.dm_clr_properties                                     |
| sys.dm_clr_tasks                                          |
| sys.dm_cryptographic_provider_properties                  |
| sys.dm_database_encryption_keys                           |
| sys.dm_db_file_space_usage                                |
| sys.dm_db_fts_index_physical_stats                        |
| sys.dm_db_index_usage_stats                               |
| sys.dm_db_log_space_usage                                 |
| sys.dm_db_mirroring_auto_page_repair                      |
| sys.dm_db_mirroring_connections                           |
| sys.dm_db_mirroring_past_actions                          |
| sys.dm_db_missing_index_details                           |
| sys.dm_db_missing_index_group_stats                       |
| sys.dm_db_missing_index_groups                            |
| sys.dm_db_partition_stats                                 |
| sys.dm_db_persisted_sku_features                          |
| sys.dm_db_script_level                                    |
| sys.dm_db_session_space_usage                             |
| sys.dm_db_task_space_usage                                |
| sys.dm_db_uncontained_entities                            |
| sys.dm_exec_background_job_queue_stats                    |
| sys.dm_exec_background_job_queue_stats                    |
| sys.dm_exec_cached_plans                                  |
| sys.dm_exec_connections                                   |
| sys.dm_exec_procedure_stats                               |
| sys.dm_exec_query_memory_grants                           |
| sys.dm_exec_query_optimizer_info                          |
| sys.dm_exec_query_resource_semaphores                     |
| sys.dm_exec_query_stats                                   |
| sys.dm_exec_query_transformation_stats                    |
| sys.dm_exec_requests                                      |
| sys.dm_exec_sessions                                      |
| sys.dm_exec_trigger_stats                                 |
| sys.dm_filestream_file_io_handles                         |
| sys.dm_filestream_file_io_requests                        |
| sys.dm_filestream_non_transacted_handles                  |
| sys.dm_fts_active_catalogs                                |
| sys.dm_fts_fdhosts                                        |
| sys.dm_fts_index_population                               |
| sys.dm_fts_memory_buffers                                 |
| sys.dm_fts_memory_pools                                   |
| sys.dm_fts_outstanding_batches                            |
| sys.dm_fts_population_ranges                              |
| sys.dm_fts_semantic_similarity_population                 |
| sys.dm_hadr_auto_page_repair                              |
| sys.dm_hadr_availability_group_states                     |
| sys.dm_hadr_availability_replica_cluster_nodes            |
| sys.dm_hadr_availability_replica_cluster_states           |
| sys.dm_hadr_availability_replica_states                   |
| sys.dm_hadr_cluster_members                               |
| sys.dm_hadr_cluster_members                               |
| sys.dm_hadr_cluster_networks                              |
| sys.dm_hadr_database_replica_cluster_states               |
| sys.dm_hadr_database_replica_states                       |
| sys.dm_hadr_instance_node_map                             |
| sys.dm_hadr_name_id_map                                   |
| sys.dm_io_backup_tapes                                    |
| sys.dm_io_cluster_shared_drives                           |
| sys.dm_io_pending_io_requests                             |
| sys.dm_logpool_hashentries                                |
| sys.dm_logpool_stats                                      |
| sys.dm_os_buffer_descriptors                              |
| sys.dm_os_child_instances                                 |
| sys.dm_os_cluster_nodes                                   |
| sys.dm_os_cluster_properties                              |
| sys.dm_os_dispatcher_pools                                |
| sys.dm_os_dispatchers                                     |
| sys.dm_os_hosts                                           |
| sys.dm_os_latch_stats                                     |
| sys.dm_os_loaded_modules                                  |
| sys.dm_os_memory_allocations                              |
| sys.dm_os_memory_broker_clerks                            |
| sys.dm_os_memory_brokers                                  |
| sys.dm_os_memory_cache_clock_hands                        |
| sys.dm_os_memory_cache_counters                           |
| sys.dm_os_memory_cache_entries                            |
| sys.dm_os_memory_cache_hash_tables                        |
| sys.dm_os_memory_clerks                                   |
| sys.dm_os_memory_node_access_stats                        |
| sys.dm_os_memory_nodes                                    |
| sys.dm_os_memory_objects                                  |
| sys.dm_os_memory_pools                                    |
| sys.dm_os_nodes                                           |
| sys.dm_os_performance_counters                            |
| sys.dm_os_process_memory                                  |
| sys.dm_os_ring_buffers                                    |
| sys.dm_os_schedulers                                      |
| sys.dm_os_server_diagnostics_log_configurations           |
| sys.dm_os_spinlock_stats                                  |
| sys.dm_os_stacks                                          |
| sys.dm_os_sublatches                                      |
| sys.dm_os_sys_info                                        |
| sys.dm_os_sys_memory                                      |
| sys.dm_os_tasks                                           |
| sys.dm_os_threads                                         |
| sys.dm_os_virtual_address_dump                            |
| sys.dm_os_wait_stats                                      |
| sys.dm_os_waiting_tasks                                   |
| sys.dm_os_windows_info                                    |
| sys.dm_os_worker_local_storage                            |
| sys.dm_os_workers                                         |
| sys.dm_qn_subscriptions                                   |
| sys.dm_repl_articles                                      |
| sys.dm_repl_schemas                                       |
| sys.dm_repl_tranhash                                      |
| sys.dm_repl_traninfo                                      |
| sys.dm_resource_governor_configuration                    |
| sys.dm_resource_governor_resource_pool_affinity           |
| sys.dm_resource_governor_resource_pools                   |
| sys.dm_resource_governor_workload_groups                  |
| sys.dm_server_audit_status                                |
| sys.dm_server_memory_dumps                                |
| sys.dm_server_registry                                    |
| sys.dm_server_services                                    |
| sys.dm_tcp_listener_states                                |
| sys.dm_tran_active_snapshot_database_transactions         |
| sys.dm_tran_active_transactions                           |
| sys.dm_tran_commit_table                                  |
| sys.dm_tran_current_snapshot                              |
| sys.dm_tran_current_transaction                           |
| sys.dm_tran_database_transactions                         |
| sys.dm_tran_locks                                         |
| sys.dm_tran_session_transactions                          |
| sys.dm_tran_top_version_generators                        |
| sys.dm_tran_transactions_snapshot                         |
| sys.dm_tran_version_store                                 |
| sys.dm_xe_map_values                                      |
| sys.dm_xe_object_columns                                  |
| sys.dm_xe_objects                                         |
| sys.dm_xe_packages                                        |
| sys.dm_xe_session_event_actions                           |
| sys.dm_xe_session_events                                  |
| sys.dm_xe_session_object_columns                          |
| sys.dm_xe_session_targets                                 |
| sys.dm_xe_sessions                                        |
| sys.endpoint_webmethods                                   |
| sys.endpoints                                             |
| sys.event_notification_event_types                        |
| sys.event_notifications                                   |
| sys.events                                                |
| sys.extended_procedures                                   |
| sys.extended_properties                                   |
| sys.filegroups                                            |
| sys.filetable_system_defined_objects                      |
| sys.filetables                                            |
| sys.foreign_key_columns                                   |
| sys.foreign_keys                                          |
| sys.fulltext_catalogs                                     |
| sys.fulltext_document_types                               |
| sys.fulltext_index_catalog_usages                         |
| sys.fulltext_index_columns                                |
| sys.fulltext_index_fragments                              |
| sys.fulltext_indexes                                      |
| sys.fulltext_languages                                    |
| sys.fulltext_semantic_language_statistics_database        |
| sys.fulltext_semantic_languages                           |
| sys.fulltext_stoplists                                    |
| sys.fulltext_stopwords                                    |
| sys.fulltext_system_stopwords                             |
| sys.function_order_columns                                |
| sys.http_endpoints                                        |
| sys.identity_columns                                      |
| sys.index_columns                                         |
| sys.indexes                                               |
| sys.internal_tables                                       |
| sys.key_constraints                                       |
| sys.key_encryptions                                       |
| sys.linked_logins                                         |
| sys.login_token                                           |
| sys.master_files                                          |
| sys.master_key_passwords                                  |
| sys.message_type_xml_schema_collection_usages             |
| sys.messages                                              |
| sys.module_assembly_usages                                |
| sys.numbered_procedure_parameters                         |
| sys.numbered_procedures                                   |
| sys.objects                                               |
| sys.openkeys                                              |
| sys.parameter_type_usages                                 |
| sys.parameter_xml_schema_collection_usages                |
| sys.parameters                                            |
| sys.partition_functions                                   |
| sys.partition_parameters                                  |
| sys.partition_range_values                                |
| sys.partition_schemes                                     |
| sys.partitions                                            |
| sys.plan_guides                                           |
| sys.procedures                                            |
| sys.registered_search_properties                          |
| sys.registered_search_property_lists                      |
| sys.remote_logins                                         |
| sys.remote_service_bindings                               |
| sys.resource_governor_configuration                       |
| sys.resource_governor_resource_pool_affinity              |
| sys.resource_governor_resource_pools                      |
| sys.resource_governor_workload_groups                     |
| sys.routes                                                |
| sys.schemas                                               |
| sys.securable_classes                                     |
| sys.selective_xml_index_namespaces                        |
| sys.selective_xml_index_paths                             |
| sys.sequences                                             |
| sys.server_assembly_modules                               |
| sys.server_audit_specification_details                    |
| sys.server_audit_specifications                           |
| sys.server_audits                                         |
| sys.server_event_notifications                            |
| sys.server_event_session_actions                          |
| sys.server_event_session_events                           |
| sys.server_event_session_fields                           |
| sys.server_event_session_targets                          |
| sys.server_event_sessions                                 |
| sys.server_events                                         |
| sys.server_file_audits                                    |
| sys.server_permissions                                    |
| sys.server_principal_credentials                          |
| sys.server_principals                                     |
| sys.server_role_members                                   |
| sys.server_sql_modules                                    |
| sys.server_trigger_events                                 |
| sys.server_triggers                                       |
| sys.servers                                               |
| sys.service_broker_endpoints                              |
| sys.service_contract_message_usages                       |
| sys.service_contract_usages                               |
| sys.service_contracts                                     |
| sys.service_message_types                                 |
| sys.service_queue_usages                                  |
| sys.service_queues                                        |
| sys.services                                              |
| sys.soap_endpoints                                        |
| sys.spatial_index_tessellations                           |
| sys.spatial_indexes                                       |
| sys.spatial_reference_systems                             |
| sys.sql_dependencies                                      |
| sys.sql_expression_dependencies                           |
| sys.sql_logins                                            |
| sys.sql_modules                                           |
| sys.stats_columns                                         |
| sys.stats_columns                                         |
| sys.symmetric_keys                                        |
| sys.synonyms                                              |
| sys.sysaltfiles                                           |
| sys.syscacheobjects                                       |
| sys.syscharsets                                           |
| sys.syscolumns                                            |
| sys.syscomments                                           |
| sys.sysconfigures                                         |
| sys.sysconstraints                                        |
| sys.syscurconfigs                                         |
| sys.syscursorcolumns                                      |
| sys.syscursorrefs                                         |
| sys.syscursors                                            |
| sys.syscursortables                                       |
| sys.sysdatabases                                          |
| sys.sysdepends                                            |
| sys.sysdevices                                            |
| sys.sysfilegroups                                         |
| sys.sysfiles                                              |
| sys.sysforeignkeys                                        |
| sys.sysfulltextcatalogs                                   |
| sys.sysindexes                                            |
| sys.sysindexkeys                                          |
| sys.syslanguages                                          |
| sys.syslockinfo                                           |
| sys.syslogins                                             |
| sys.sysmembers                                            |
| sys.sysmessages                                           |
| sys.sysobjects                                            |
| sys.sysoledbusers                                         |
| sys.sysopentapes                                          |
| sys.sysperfinfo                                           |
| sys.syspermissions                                        |
| sys.sysprocesses                                          |
| sys.sysprotects                                           |
| sys.sysreferences                                         |
| sys.sysremotelogins                                       |
| sys.sysservers                                            |
| sys.system_columns                                        |
| sys.system_components_surface_area_configuration          |
| sys.system_internals_allocation_units                     |
| sys.system_internals_partition_columns                    |
| sys.system_internals_partitions                           |
| sys.system_objects                                        |
| sys.system_parameters                                     |
| sys.system_sql_modules                                    |
| sys.system_views                                          |
| sys.systypes                                              |
| sys.sysusers                                              |
| sys.table_types                                           |
| sys.tables                                                |
| sys.tcp_endpoints                                         |
| sys.trace_categories                                      |
| sys.trace_columns                                         |
| sys.trace_event_bindings                                  |
| sys.trace_events                                          |
| sys.trace_subclass_values                                 |
| sys.trace_xe_action_map                                   |
| sys.trace_xe_event_map                                    |
| sys.traces                                                |
| sys.transmission_queue                                    |
| sys.trigger_event_types                                   |
| sys.trigger_events                                        |
| sys.triggers                                              |
| sys.type_assembly_usages                                  |
| sys.types                                                 |
| sys.user_token                                            |
| sys.via_endpoints                                         |
| sys.views                                                 |
| sys.xml_indexes                                           |
| sys.xml_schema_attributes                                 |
| sys.xml_schema_collections                                |
| sys.xml_schema_component_placements                       |
| sys.xml_schema_components                                 |
| sys.xml_schema_elements                                   |
| sys.xml_schema_facets                                     |
| sys.xml_schema_model_groups                               |
| sys.xml_schema_namespaces                                 |
| sys.xml_schema_types                                      |
| sys.xml_schema_wildcard_namespaces                        |
| sys.xml_schema_wildcards                                  |
+-----------------------------------------------------------+
Database: TianTianKuaiDi
[146 tables]
+-----------------------------------------------------------+
| AboutUs                                                   |
| Announcement                                              |
| CollectRate                                               |
| ConsignProcutDetail                                       |
| ConsignmentDetail                                         |
| ConsignmentDetail                                         |
| ConsignmentInMessage                                      |
| ConsignmentOutMessage                                     |
| ConsignmentTrack                                          |
| ConsumerRecord                                            |
| CostRate                                                  |
| CouponProvide                                             |
| CouponSet                                                 |
| CustomerAddress                                           |
| CustomerInfo                                              |
| D99_CMD                                                   |
| D99_REG                                                   |
| D99_Tmp                                                   |
| Desponst                                                  |
| HelperCenter                                              |
| If_CustomerNumber                                         |
| If_CustomerNumber                                         |
| InStock                                                   |
| InspectionApply                                           |
| Integral                                                  |
| InterfaceForOtherSite                                     |
| InterfaceHaitao                                           |
| LeaveWord                                                 |
| LogRecord                                                 |
| Menu                                                      |
| ProductType                                               |
| ProductTypeSmall                                          |
| PurchaseAgentDetail                                       |
| PurchaseAgentDetail                                       |
| QuestionType                                              |
| QuickAnswer                                               |
| ReWardRecord                                              |
| RechargeRecord                                            |
| RecommandConsignAmount                                    |
| RefundAmount                                              |
| RegionsCurrency                                           |
| ReleaseList                                               |
| ReturnGoodNote                                            |
| ReturnGoodsDetail                                         |
| ReturnGoodsDetail                                         |
| SerialNo                                                  |
| Shop_OrderDetail                                          |
| Shop_OrderDetail                                          |
| Shop_Product                                              |
| Shop_ShoppingCart                                         |
| SmsReceive                                                |
| SmsSend                                                   |
| StorageForecast                                           |
| StoragePrice                                              |
| StorageSingle                                             |
| SysEmail                                                  |
| SysTransportCode                                          |
| Sys_MessageQueue                                          |
| Sys_Record                                                |
| Sys_Set                                                   |
| SystemConsignment                                         |
| SystemCustomerMessage                                     |
| SystemDiscount                                            |
| SystemMaintenance                                         |
| SystemSet                                                 |
| SystemState                                               |
| SystemTransportPriceNew                                   |
| SystemTrnasportPrice                                      |
| T_AbandonGood                                             |
| T_Award                                                   |
| T_ClaimsRecord                                            |
| T_CustomerQuestion                                        |
| T_Customer_Q_Detail                                       |
| T_EnsureMoney                                             |
| T_Letter                                                  |
| T_Links                                                   |
| T_MemberShipLevel                                         |
| T_MessageTip                                              |
| T_OtherSiteCode                                           |
| T_PaymentRecord                                           |
| T_ServiceListNew                                          |
| T_ServiceListNew                                          |
| T_ServiceWarehouse                                        |
| Track                                                     |
| TrackReply                                                |
| TrackStation                                              |
| TransportPriceNew                                         |
| TransportPriceNew                                         |
| UPSConsign                                                |
| UserInfo                                                  |
| V_AbandonGood                                             |
| V_AbandonSingle                                           |
| V_ClaimRecordCustomer                                     |
| V_CollectRate                                             |
| V_ConsignmentCustomer                                     |
| V_ConsignmentDetail                                       |
| V_ConsignmentProductDetail                                |
| V_CostRate                                                |
| V_CouponProvide                                           |
| V_CouponSet                                               |
| V_CustomerQuestionDetail                                  |
| V_CustomerQuestionDetail                                  |
| V_For55haitao                                             |
| V_ForecastCustomer                                        |
| V_ForecastStorageCS                                       |
| V_InspectionCustomerNew                                   |
| V_InspectionCustomerNew                                   |
| V_MessageTip                                              |
| V_OrderDetail                                             |
| V_PayTaxCustomer                                          |
| V_PurchaseAgent                                           |
| V_RecommandAccount                                        |
| V_RefundCustomer                                          |
| V_Reports_BusinessConsignment                             |
| V_Reports_Consignment                                     |
| V_Reports_ConsumerRecord                                  |
| V_Reports_MainNumber                                      |
| V_Reports_RechargeRecord                                  |
| V_Reports_RefundAmount                                    |
| V_Reports_StorageSingle                                   |
| V_ReturnGoodCustomer                                      |
| V_ReturnGoodsStorage                                      |
| V_ReturnTax                                               |
| V_SeInventoryInquires                                     |
| V_StorageCustomer                                         |
| V_StorageForecastWarehouse                                |
| V_SysTransportWarehouse                                   |
| V_TaxRebate                                               |
| V_UPSCustomer                                             |
| V_getSamllType                                            |
| Warehouse                                                 |
| authority                                                 |
| channelManage                                             |
| cmd                                                       |
| comd_list                                                 |
| consignmentNumber                                         |
| distinctConsignment                                       |
| hack                                                      |
| jiaozhu                                                   |
| numberRecord                                              |
| pangolin_test_table                                       |
| paypalCharge                                              |
| proviceCityArea                                           |
| setConsignmentNumber                                      |
| sqlmapoutput                                              |
| taxRebate                                                 |
+-----------------------------------------------------------+

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：中

漏洞Rank：7

确认时间：2016-01-04 16:05

厂商回复：

谢谢白帽子。

最新状态：

暂无

漏洞评价：

评价