当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2016-0211911

漏洞标题：养天和大药房某系统GetShell影响百万会员及上亿交易流水（存在入侵痕迹）

相关厂商：养天和大药房连锁有限公司

漏洞作者： 路人甲

提交时间：2016-05-23 19:40

修复时间：2016-07-10 10:20

公开时间：2016-07-10 10:20

漏洞类型：系统/服务补丁不及时

危害等级：高

自评Rank：15

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2016-05-23： 细节已通知厂商并且等待厂商处理中
2016-05-26： 厂商已经确认，细节仅向厂商公开
2016-06-05： 细节向核心白帽子及相关领域专家公开
2016-06-15： 细节向普通白帽子公开
2016-06-25： 细节向实习白帽子公开
2016-07-10： 细节向公众公开

简要描述：

...

详细说明：



mask 区域


1.://**.**.**/infosys/


反序列getshell，引用入侵shell：



mask 区域


1.://**.**.**/bea_wls_internal/css.jsp


密码:123123
JDBC:

<code><url>jdbc:oracle:thin:@**.**.**.**:1521:ora8</url>
    <driver-name>oracle.jdbc.OracleDriver</driver-name>
    <properties>
      <property>
        <name>user</name>
        <value>gspstore_bj</value>
      </property>
    </properties>
    <password-encrypted>{AES}07tD+0kPpDK2TTKaS0UGE8MZepTcz3kbt62bYRHZ7hw=</password-encrypted>

</code>

SYS	AUD$	244091597
GSPSTORE	T_SITE_CYCLE_GOODS	126275200
GSPSTORE	T_SITE_RETAIL_DETAIL	105073214
GSPSTORE	T_BILL_DETAIL	51244165
GSPSTORE	T_SITE_RETAIL_PAYMENT	50683163
GSPSTORE	T_SITE_RETAIL	47417828
GSPSTORE	T_SITE_STOCK_MONTH_ACC	42098119
GSPSTORE	T_DAILY_SITE_BILL	37983134
GSP_CEN	T_GOODS_ALIAS_TO_DOWNLOAD	37232003
GSPSTORE	T_DEPT_GOODS	36406645
GSPSTORE	T_SITE_PLAN	36213971
GSP_CEN	T_SITE_CYCLE_GOODS	28530798
GSPSTORE	T_SITE_BILL_DETAIL	27998401
GSPSTORE	T_SITE_PLAN_DETAIL	27630504
GSPSTORE	T_BILL_PACK_DETAIL	22361803
GSPSTORE	T_BILL_SCAN_DETAIL	21690945
GSPSTORE	T_DAILY_SITE_STORE	16322314
GSPSTORE_HAI	T_SITE_RETAIL_DETAIL	15801848
GSPSTORE_HAI	T_MEMBER_TO_DOWNLOAD_BACK	15765245
GSPSTORE	T_DAILY_SITE_STORE_0525	14617186
GSPSTORE	T_UPLOAD_BILL_DETAIL	13956997
GSP_CEN	T_SITE_RETAIL_PAYMENT	13826481
GSPSTORE	T_GOODS_CURING_RECORD_DETAIL	12976170
GSPSTORE	T_ELE_BILL_GOODS	12878570
GSPSTORE	T_SITE_PRESC_DETAIL	12595571
GSPSTORE	T_SITE_CYCLE_COMP	11728081
GSPSTORE_HAI	T_DAILY_SITE_STORE	10381424
GSPSTORE	T_SITE_CYCLE_DETAIL	10236232
GSPSTORE	T_SALE_BILL_PAGE	10028525
GSPSTORE_HAI	T_BILL_DETAIL	10002184
GSPSTORE	T_DEPT_BILL_DETAIL_TO_DL	9874774
GSPSTORE_HAI	T_SITE_RETAIL_PAYMENT	9614824
GSPSTORE_HAI	T_SITE_RETAIL	9084124
GSPSTORE	T_SITE_PRESC	8685341
GSP_CEN	T_SITE_BILL_DETAIL	8657001
GSPSTORE	T_MEMBER_INTEGRAL_RECORD	8459560
GSPSTORE_HAI	T_SITE_CYCLE_GOODS	7865334
GSPSTORE_HAI	T_SITE_STOCK_MONTH_ACC	7453726
GSPSTORE	T_BILL_PAGE	7019788
GSPSTORE	T_MEMBER_TO_DL	6822569
GSPSTORE	T_PERIOD_STOCK	6496463
GSPSTORE	T_SITE_CYCLE_SCAN	6233817
GSPSTORE	T_DL_BILL_DETAIL	5669968
GSPSTORE	T_MEMBER_TO_DOWNLOAD	5637096
GSPSTORE_HAI	T_SITE_BILL_DETAIL	5462601
GSPSTORE	T_CUSTOMER_LASTPRICE	4601628
GSPSTORE	T_GOODS_CURING_RECORD_BK	4378414
GSPSTORE	T_STORE_AMOUNT	4263913
GSPSTORE	T_CYCLECOUNT_GOODS	3768931
GSPSTORE_HAI	T_SITE_PLAN_DETAIL	3642774
GSP_CEN	T_SITE_CYCLE_COMP	3543343
GSPSTORE_HAI	T_BILL_SCAN_DETAIL	3449195
GSPSTORE_HAI	T_BILL_PACK_DETAIL	3383941
GSPSTORE	T_BILL_HEADER	3333042
GSPSTORE	T_STOCK	3272638
GSPSTORE	T_SITE_STORE	3165085
GSPSTORE	T_SITE_STOCK_ACC	3163466
GSPSTORE	T_CHINESE_GOODS_CLEAR_RECORD	3075998
GSPSTORE	T_BILL_HEADER_20151221	2986843
GSP_CEN	T_SITE_CYCLE_DETAIL	2777283
GSPSTORE	T_MEM_NEWS_GET	2675662
GSPSTORE	T_BILL_HEADER_20151221HS	2422883
GSPSTORE	T_SITE_CYCLE_ACTUAL	2178096
GSPSTORE_HAI	T_MEMBER_INTEGRAL_RECORD	2103280
GSPSTORE	T_GOODS_INFO_TO_DOWNLOAD	2051571
GSPSTORE_HAI	T_MEMBER_TO_DOWNLOAD	2040914
GSPSTORE	T_STORE_IN_RECV_DETAIL	1981382
GSP_CEN	T_MEMBER_TO_DOWNLOAD	1943485
GSPSTORE_HAI	T_SITE_PLAN	1906212
GSP_CEN	T_SITE_CYCLE_ACTUAL	1884911
GSPSTORE_HAI	T_DEPT_GOODS	1878150
GSPSTORE	T_QA_DETAIL	1796984
GSPSTORE	T_BILL_PACK	1775133
MIAHR	T_HR_PAY_MONTH_DETAIL	1769784
GSPSTORE_HAI	T_SITE_CYCLE_COMP	1763051
GSPSTORE	T_SITE_PRESC_DETAIL_DEL2013	1761850
GSPSTORE_HAI	T_ELE_BILL_GOODS	1740698
GSPSTORE	T_SITE_AWARD_METHOD_TO_DL	1717999
GSPSTORE	T_DEPT_BILL_RECORD	1714143
GSPSTORE_HAI	T_GOODS_INFO_TO_DOWNLOAD	1710610
GSPSTORE	T_SITE_BILL	1708585
GSPSTORE_HAI	T_SITE_CYCLE_DETAIL	1674821
GSPSTORE	T_SITE_PER_ATTENDANCE	1546785
GSPSTORE	T_STORE_GOODS_SERIAL	1494070
GSPSTORE	T_GOODS_BATCH	1483926
GSPSTORE	T_SITE_STOCK	1482390
GSPSTORE_HAI	T_BILL_PAGE	1474279
GSPSTORE_HAI	T_GOODS_CURING_RECORD_DETAIL	1473185
GSPSTORE_HAI	T_SALE_BILL_PAGE	1461846
SYS	WRI$_OPTSTAT_HISTGRM_HISTORY	1461320
GSPSTORE_HAI	T_SITE_PRESC_DETAIL	1433290
GSPSTORE	T_MEM_NEWS_TOGET	1368955
GSPSTORE_HAI	T_SITE_CYCLE_SCAN	1341096
GSPSTORE_HAI	T_SITE_PRESC	1320565
GSPSTORE	T_SITE_PRESC_BACK	1280690
SYS	WRH$_ACTIVE_SESSION_HISTORY	1257271
GSPSTORE	T_SITE_NOTIFY_SITE	1068358
HOSP	T_STOCK_COM	1053200
GSPSTORE	T_STOCK_COM	1053200
GSPSTORE	T_MIASERVICE_LOG	1031901
GSPSTORE	T_DAILY_MOVE_BILL	1016207
GSPSTORE_SHOP	T_GOODS_INFO_TO_DOWNLOAD	904261
GSPSTORE	T_STORE_GOODS_EXTRA	868498
MIAHR	T_MOD_MSG	849098
GSPSTORE	T_MEMBER	843458
GSPSTORE	T_DEPT_MEMBER	841752
GSPSTORE	T_SITE_RETURN_BILL_DETAIL	834008
GSPSTORE_BJ2	T_SITE_RETAIL_DETAIL	832492
GSPSTORE	T_STORE_STATION_SEND_DETAIL	812698
GSPSTORE	T_SITE_PATH_BILL_DETAIL	809888
GSPSTORE	T_BILL_HEADER_EXTRA	806997
GSPSTORE_HAI	T_BILL_HEADER	765713
GSPSTORE_HAI	T_CUSTOMER_LASTPRICE	736505
GSP_CEN	T_SITE_NOTIFY_SITE	720193
GSP_CEN	T_GOODS_INFO_TO_DOWNLOAD	706754
GSPSTORE_HAI	T_DAILY_STOCK_DETAIL	688461
GSPSTORE_HAI	T_PERIOD_STOCK	682999
GSPSTORE_HAI	T_STORE_AMOUNT	675268
GSPSTORE_HAI	T_STORE_IN_RECV_DETAIL	643873
GSPSTORE_HAI	T_SITE_STORE	625079
GSPSTORE_HAI	T_QA_DETAIL	616380
GSPSTORE	T_QA_PAGE	614200
GSPSTORE	T_STORE_SALE	612941
HOSP	T_SITE_CYCLE_GOODS	599111
GSPSTORE_HAI	T_STOCK	583994
GSPSTORE	T_GOODS_CURING_RECORD	578704
GSPSTORE	T_DEPT_BILL_TO_DL	559922
GSPSTORE	T_SITE_DAILY_TAKINGS	559403
GSP_CEN	T_MEMBER_INTEGRAL_RECORD	555050
GSPSTORE_HAI	T_GOODS_BATCH	543134
GSPSTORE	T_GOODS_PRICE	531282
GSPSTORE_BJ2	T_SITE_CYCLE_GOODS	529282
GSPSTORE	T_MEM_LOTTERY_DEPT_TEMP	525679
GSPSTORE	T_GOODS_ALIAS_TO_DOWNLOAD	509732
GSPSTORE	T_MEMBER_CUT	502987
GSPSTORE	T_MESSAGE_SEND_RECORD	492180
GSPSTORE	T_STOCK_ACC	474367
GSPSTORE_HAI	T_GOODS_ALIAS_TO_DOWNLOAD	471318
GSPSTORE	T_BUYPLAN_DETAIL	471307
GSPSTORE	T_CYCLECOUNT_DETAIL	468126
GSPSTORE	T_STORE_IN_RECV	453563
GSPSTORE	T_SITE_PLAN_VIEW	447777
GSPSTORE	T_ART_PRICE	435338
GSPSTORE	T_PENDING_BILL_AP	416101
GSPSTORE	T_QA_HEADER	410714
GSPSTORE	T_DAILY_STOCK_DETAIL	401518
GSPSTORE	T_RETAIL_FILE_UPLOAD	397617
GSP_CEN	T_SITE_BILL	396865
GSPSTORE_BJ2	T_BILL_DETAIL	389989
GSPSTORE_HAI	T_SITE_BILL	382755
GSPSTORE_HAI	T_DAILY_STOCK	382666
MIAHR	T_SYS_LOG	377084
GSP_CEN	T_MEM_TEMP_GOODS_CLASS	376983
GSPSTORE	SENDMSGTABLE	375777
MIAHR	T_OA_TASK_HANDLER	370691
GSPSTORE	T_STORE_RACKNO	369323
GSPSTORE	T_UPLOAD_BILL	369076
GSPSTORE	T_DAILY_STOCK_DETAIL_0525	368330
GSPSTORE_BJ2	T_SITE_RETAIL	367714
GSPSTORE_BJ2	T_SITE_RETAIL_PAYMENT	365319
GSPSTORE_HAI	T_MEM_NEWS_TOGET	363900
MIAHR	T_OA_TASK	363331
MIAHR	T_OA_STEP	362375
GSP_CEN	T_BILL_TO_COPY	359854
GSPSTORE	T_BILL_TO_COPY	359854
GSPSTORE	T_GOODS_SERIAL_INFO	351213
SYS	HISTGRM$	336620
SYS	SOURCE$	331941
GSPSTORE	T_SITE_RETURN_BILL_PAGE	313877
GSPSTORE	SENDMSG_BACK	306801
GSPSTORE	T_ART_MEM_PRICE	302289
GSPSTORE	T_SITE_RETURN_BILL	297573
GSPSTORE_HAI	T_SITE_STOCK	295205
GSPSTORE	T_TEST_GOODS_SERIAL_INFO	293103
GSPSTORE	T_W_S	291443
GSPSTORE_HAI	T_DEPT_BILL_RECORD	290020
GSP_CEN	T_BILL_DETAIL	284670
GSPSTORE	T_DAILY_AUTO_BILL	284489
GSPSTORE_SHOP	T_MEMBER_TO_DOWNLOAD	275958
GSPSTORE	T_SITE_PLAN_HEADER	275360
SYS	WRI$_ADV_MESSAGE_GROUPS	272323
GSPSTORE	T_USER_SITE_TRANS	271843
GSPSTORE_HAI	T_BILL_PACK	271592
GSPSTORE	T_DAILY_PENDING_BILL	263320
GSPSTORE	T_ART_PRICE_TO_DL	259311
GSPSTORE_SHOP	T_BILL_DETAIL	257262
GSPSTORE	T_WWW_USER_SITE_TRANS	256936
GSPSTORE_HAI	T_SITE_CYCLE_ACTUAL	256338
SYS	WRH$_EVENT_HISTOGRAM	251392
GSPSTORE	T_DL_BILL_SITE	250251
GSPSTORE	T_DL_BILL	250250


A2.png

漏洞证明：

SYS	AUD$	244091597
GSPSTORE	T_SITE_CYCLE_GOODS	126275200
GSPSTORE	T_SITE_RETAIL_DETAIL	105073214
GSPSTORE	T_BILL_DETAIL	51244165
GSPSTORE	T_SITE_RETAIL_PAYMENT	50683163
GSPSTORE	T_SITE_RETAIL	47417828
GSPSTORE	T_SITE_STOCK_MONTH_ACC	42098119
GSPSTORE	T_DAILY_SITE_BILL	37983134
GSP_CEN	T_GOODS_ALIAS_TO_DOWNLOAD	37232003
GSPSTORE	T_DEPT_GOODS	36406645
GSPSTORE	T_SITE_PLAN	36213971
GSP_CEN	T_SITE_CYCLE_GOODS	28530798
GSPSTORE	T_SITE_BILL_DETAIL	27998401
GSPSTORE	T_SITE_PLAN_DETAIL	27630504
GSPSTORE	T_BILL_PACK_DETAIL	22361803
GSPSTORE	T_BILL_SCAN_DETAIL	21690945
GSPSTORE	T_DAILY_SITE_STORE	16322314
GSPSTORE_HAI	T_SITE_RETAIL_DETAIL	15801848
GSPSTORE_HAI	T_MEMBER_TO_DOWNLOAD_BACK	15765245
GSPSTORE	T_DAILY_SITE_STORE_0525	14617186
GSPSTORE	T_UPLOAD_BILL_DETAIL	13956997
GSP_CEN	T_SITE_RETAIL_PAYMENT	13826481
GSPSTORE	T_GOODS_CURING_RECORD_DETAIL	12976170
GSPSTORE	T_ELE_BILL_GOODS	12878570
GSPSTORE	T_SITE_PRESC_DETAIL	12595571
GSPSTORE	T_SITE_CYCLE_COMP	11728081
GSPSTORE_HAI	T_DAILY_SITE_STORE	10381424
GSPSTORE	T_SITE_CYCLE_DETAIL	10236232
GSPSTORE	T_SALE_BILL_PAGE	10028525
GSPSTORE_HAI	T_BILL_DETAIL	10002184
GSPSTORE	T_DEPT_BILL_DETAIL_TO_DL	9874774
GSPSTORE_HAI	T_SITE_RETAIL_PAYMENT	9614824
GSPSTORE_HAI	T_SITE_RETAIL	9084124
GSPSTORE	T_SITE_PRESC	8685341
GSP_CEN	T_SITE_BILL_DETAIL	8657001
GSPSTORE	T_MEMBER_INTEGRAL_RECORD	8459560
GSPSTORE_HAI	T_SITE_CYCLE_GOODS	7865334
GSPSTORE_HAI	T_SITE_STOCK_MONTH_ACC	7453726
GSPSTORE	T_BILL_PAGE	7019788
GSPSTORE	T_MEMBER_TO_DL	6822569
GSPSTORE	T_PERIOD_STOCK	6496463
GSPSTORE	T_SITE_CYCLE_SCAN	6233817
GSPSTORE	T_DL_BILL_DETAIL	5669968
GSPSTORE	T_MEMBER_TO_DOWNLOAD	5637096
GSPSTORE_HAI	T_SITE_BILL_DETAIL	5462601
GSPSTORE	T_CUSTOMER_LASTPRICE	4601628
GSPSTORE	T_GOODS_CURING_RECORD_BK	4378414
GSPSTORE	T_STORE_AMOUNT	4263913
GSPSTORE	T_CYCLECOUNT_GOODS	3768931
GSPSTORE_HAI	T_SITE_PLAN_DETAIL	3642774
GSP_CEN	T_SITE_CYCLE_COMP	3543343
GSPSTORE_HAI	T_BILL_SCAN_DETAIL	3449195
GSPSTORE_HAI	T_BILL_PACK_DETAIL	3383941
GSPSTORE	T_BILL_HEADER	3333042
GSPSTORE	T_STOCK	3272638
GSPSTORE	T_SITE_STORE	3165085
GSPSTORE	T_SITE_STOCK_ACC	3163466
GSPSTORE	T_CHINESE_GOODS_CLEAR_RECORD	3075998
GSPSTORE	T_BILL_HEADER_20151221	2986843
GSP_CEN	T_SITE_CYCLE_DETAIL	2777283
GSPSTORE	T_MEM_NEWS_GET	2675662
GSPSTORE	T_BILL_HEADER_20151221HS	2422883
GSPSTORE	T_SITE_CYCLE_ACTUAL	2178096
GSPSTORE_HAI	T_MEMBER_INTEGRAL_RECORD	2103280
GSPSTORE	T_GOODS_INFO_TO_DOWNLOAD	2051571
GSPSTORE_HAI	T_MEMBER_TO_DOWNLOAD	2040914
GSPSTORE	T_STORE_IN_RECV_DETAIL	1981382
GSP_CEN	T_MEMBER_TO_DOWNLOAD	1943485
GSPSTORE_HAI	T_SITE_PLAN	1906212
GSP_CEN	T_SITE_CYCLE_ACTUAL	1884911
GSPSTORE_HAI	T_DEPT_GOODS	1878150
GSPSTORE	T_QA_DETAIL	1796984
GSPSTORE	T_BILL_PACK	1775133
MIAHR	T_HR_PAY_MONTH_DETAIL	1769784
GSPSTORE_HAI	T_SITE_CYCLE_COMP	1763051
GSPSTORE	T_SITE_PRESC_DETAIL_DEL2013	1761850
GSPSTORE_HAI	T_ELE_BILL_GOODS	1740698
GSPSTORE	T_SITE_AWARD_METHOD_TO_DL	1717999
GSPSTORE	T_DEPT_BILL_RECORD	1714143
GSPSTORE_HAI	T_GOODS_INFO_TO_DOWNLOAD	1710610
GSPSTORE	T_SITE_BILL	1708585
GSPSTORE_HAI	T_SITE_CYCLE_DETAIL	1674821
GSPSTORE	T_SITE_PER_ATTENDANCE	1546785
GSPSTORE	T_STORE_GOODS_SERIAL	1494070
GSPSTORE	T_GOODS_BATCH	1483926
GSPSTORE	T_SITE_STOCK	1482390
GSPSTORE_HAI	T_BILL_PAGE	1474279
GSPSTORE_HAI	T_GOODS_CURING_RECORD_DETAIL	1473185
GSPSTORE_HAI	T_SALE_BILL_PAGE	1461846
SYS	WRI$_OPTSTAT_HISTGRM_HISTORY	1461320
GSPSTORE_HAI	T_SITE_PRESC_DETAIL	1433290
GSPSTORE	T_MEM_NEWS_TOGET	1368955
GSPSTORE_HAI	T_SITE_CYCLE_SCAN	1341096
GSPSTORE_HAI	T_SITE_PRESC	1320565
GSPSTORE	T_SITE_PRESC_BACK	1280690
SYS	WRH$_ACTIVE_SESSION_HISTORY	1257271
GSPSTORE	T_SITE_NOTIFY_SITE	1068358
HOSP	T_STOCK_COM	1053200
GSPSTORE	T_STOCK_COM	1053200
GSPSTORE	T_MIASERVICE_LOG	1031901
GSPSTORE	T_DAILY_MOVE_BILL	1016207
GSPSTORE_SHOP	T_GOODS_INFO_TO_DOWNLOAD	904261
GSPSTORE	T_STORE_GOODS_EXTRA	868498
MIAHR	T_MOD_MSG	849098
GSPSTORE	T_MEMBER	843458
GSPSTORE	T_DEPT_MEMBER	841752
GSPSTORE	T_SITE_RETURN_BILL_DETAIL	834008
GSPSTORE_BJ2	T_SITE_RETAIL_DETAIL	832492
GSPSTORE	T_STORE_STATION_SEND_DETAIL	812698
GSPSTORE	T_SITE_PATH_BILL_DETAIL	809888
GSPSTORE	T_BILL_HEADER_EXTRA	806997
GSPSTORE_HAI	T_BILL_HEADER	765713
GSPSTORE_HAI	T_CUSTOMER_LASTPRICE	736505
GSP_CEN	T_SITE_NOTIFY_SITE	720193
GSP_CEN	T_GOODS_INFO_TO_DOWNLOAD	706754
GSPSTORE_HAI	T_DAILY_STOCK_DETAIL	688461
GSPSTORE_HAI	T_PERIOD_STOCK	682999
GSPSTORE_HAI	T_STORE_AMOUNT	675268
GSPSTORE_HAI	T_STORE_IN_RECV_DETAIL	643873
GSPSTORE_HAI	T_SITE_STORE	625079
GSPSTORE_HAI	T_QA_DETAIL	616380
GSPSTORE	T_QA_PAGE	614200
GSPSTORE	T_STORE_SALE	612941
HOSP	T_SITE_CYCLE_GOODS	599111
GSPSTORE_HAI	T_STOCK	583994
GSPSTORE	T_GOODS_CURING_RECORD	578704
GSPSTORE	T_DEPT_BILL_TO_DL	559922
GSPSTORE	T_SITE_DAILY_TAKINGS	559403
GSP_CEN	T_MEMBER_INTEGRAL_RECORD	555050
GSPSTORE_HAI	T_GOODS_BATCH	543134
GSPSTORE	T_GOODS_PRICE	531282
GSPSTORE_BJ2	T_SITE_CYCLE_GOODS	529282
GSPSTORE	T_MEM_LOTTERY_DEPT_TEMP	525679
GSPSTORE	T_GOODS_ALIAS_TO_DOWNLOAD	509732
GSPSTORE	T_MEMBER_CUT	502987
GSPSTORE	T_MESSAGE_SEND_RECORD	492180
GSPSTORE	T_STOCK_ACC	474367
GSPSTORE_HAI	T_GOODS_ALIAS_TO_DOWNLOAD	471318
GSPSTORE	T_BUYPLAN_DETAIL	471307
GSPSTORE	T_CYCLECOUNT_DETAIL	468126
GSPSTORE	T_STORE_IN_RECV	453563
GSPSTORE	T_SITE_PLAN_VIEW	447777
GSPSTORE	T_ART_PRICE	435338
GSPSTORE	T_PENDING_BILL_AP	416101
GSPSTORE	T_QA_HEADER	410714
GSPSTORE	T_DAILY_STOCK_DETAIL	401518
GSPSTORE	T_RETAIL_FILE_UPLOAD	397617
GSP_CEN	T_SITE_BILL	396865
GSPSTORE_BJ2	T_BILL_DETAIL	389989
GSPSTORE_HAI	T_SITE_BILL	382755
GSPSTORE_HAI	T_DAILY_STOCK	382666
MIAHR	T_SYS_LOG	377084
GSP_CEN	T_MEM_TEMP_GOODS_CLASS	376983
GSPSTORE	SENDMSGTABLE	375777
MIAHR	T_OA_TASK_HANDLER	370691
GSPSTORE	T_STORE_RACKNO	369323
GSPSTORE	T_UPLOAD_BILL	369076
GSPSTORE	T_DAILY_STOCK_DETAIL_0525	368330
GSPSTORE_BJ2	T_SITE_RETAIL	367714
GSPSTORE_BJ2	T_SITE_RETAIL_PAYMENT	365319
GSPSTORE_HAI	T_MEM_NEWS_TOGET	363900
MIAHR	T_OA_TASK	363331
MIAHR	T_OA_STEP	362375
GSP_CEN	T_BILL_TO_COPY	359854
GSPSTORE	T_BILL_TO_COPY	359854
GSPSTORE	T_GOODS_SERIAL_INFO	351213
SYS	HISTGRM$	336620
SYS	SOURCE$	331941
GSPSTORE	T_SITE_RETURN_BILL_PAGE	313877
GSPSTORE	SENDMSG_BACK	306801
GSPSTORE	T_ART_MEM_PRICE	302289
GSPSTORE	T_SITE_RETURN_BILL	297573
GSPSTORE_HAI	T_SITE_STOCK	295205
GSPSTORE	T_TEST_GOODS_SERIAL_INFO	293103
GSPSTORE	T_W_S	291443
GSPSTORE_HAI	T_DEPT_BILL_RECORD	290020
GSP_CEN	T_BILL_DETAIL	284670
GSPSTORE	T_DAILY_AUTO_BILL	284489
GSPSTORE_SHOP	T_MEMBER_TO_DOWNLOAD	275958
GSPSTORE	T_SITE_PLAN_HEADER	275360
SYS	WRI$_ADV_MESSAGE_GROUPS	272323
GSPSTORE	T_USER_SITE_TRANS	271843
GSPSTORE_HAI	T_BILL_PACK	271592
GSPSTORE	T_DAILY_PENDING_BILL	263320
GSPSTORE	T_ART_PRICE_TO_DL	259311
GSPSTORE_SHOP	T_BILL_DETAIL	257262
GSPSTORE	T_WWW_USER_SITE_TRANS	256936
GSPSTORE_HAI	T_SITE_CYCLE_ACTUAL	256338
SYS	WRH$_EVENT_HISTOGRAM	251392
GSPSTORE	T_DL_BILL_SITE	250251
GSPSTORE	T_DL_BILL	250250


A2.png

修复方案：

更新补丁

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：11

确认时间：2016-05-26 10:16

厂商回复：

CNVD未直接复现所述情况，暂未建立与网站管理单位的直接处置渠道，待认领。

最新状态：

暂无

漏洞评价：

评价

  1. 2016-05-23 21:14 | 大师兄 ( 实习白帽子 | Rank:31 漏洞数:8 | 每日必关注乌云)

    。