当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2014-081077

漏洞标题:某运行数百家酒店服务器存在安全漏洞可能导致酒店数据泄漏

相关厂商:酒店

漏洞作者: 路人甲

提交时间:2014-10-28 15:04

修复时间:2014-12-12 15:06

公开时间:2014-12-12 15:06

漏洞类型:未授权访问/权限绕过

危害等级:高

自评Rank:20

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2014-10-28: 细节已通知厂商并且等待厂商处理中
2014-11-02: 厂商已经确认,细节仅向厂商公开
2014-11-12: 细节向核心白帽子及相关领域专家公开
2014-11-22: 细节向普通白帽子公开
2014-12-02: 细节向实习白帽子公开
2014-12-12: 细节向公众公开

简要描述:

超百家大型酒店沦陷血案 # 可持续性脱库

详细说明:

116家大型酒店,包括了内陆到香港。
因为一家酒店的权限不严,其余近百家酒店因为同服务器导致了此次血案发生
数据、开放,可持续性脱库
证明见下面

漏洞证明:

血案事发现场:珠海怡景湾大酒店
存在延时越权

http://www.harbourviewhotel.com/admin


禁用JS的跳转,即可任意操作后台
后台上传未做过滤,直接上传asp

39.png


给出IIS:

ID IIS_USER IIS_PASS Domain Path 
1 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80: c:\inetpub\wwwroot
2 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:hurghada.grand.baronyhotels.com
:80:hurghada.test.wintour.cn D:\wwwroot\www_baronyhotels_Egypt_com
3 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.panyuhotel.com
:80:panyuhotel.com D:\wwwroot-1\www_panyuhotel_com
4 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.lido-hotel.cn
:80:lido-hotel.cn D:\wwwroot\www_lido-hotel1_cn
5 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:hkprice.test.wintour.cn D:\wwwroot\hkmo_price\hkmo_price
6 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:zhifubao.test.wintour.cn D:\wwwroot\WintourAndAlipay
7 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.pvcsh.com D:\wwwroot\www_pvcsh_com
8 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.xfi-hotel.com
:80:xfi-hotel.com D:\wwwroot\www_xfhotel_com
9 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:ninedragons.fossilwood.baronyhotels.com
:80:ninedragons.test.wintour.cn D:\wwwroot\www_baronyhotels_fuxiwu_com
10 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:glasgow.baronyhotels.com
:80:glasgow.test.wintour.cn D:\wwwroot\www_baronyhotels_Glasgow_com
11 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:booking.royalmediterranean-hotel.com D:\wwwroot-1\www_mediterraneanhotel_com_cn
12 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:newsletter.guangzhouhotel.cn D:\wwwroot\newsletter
13 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:dongying.lanhai.cn
:80:dongying.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_dongying_com
14 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.xinyuexinhotel.com
:80:xinyuexinhotel.com D:\wwwroot-1\www_xinyuexinhotel_com_demo
15 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:bbs.test.wintour.cn D:\wwwroot\www_lcghotelBBS_com
16 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:lcghotel.test.wintour.cn D:\wwwroot\www_lcghotel_com
17 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:licang.lanhai.cn
:80:licang.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_licang_com
18 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.iphotspring.com
:80:iphotspring.com D:\wwwroot\www_iphotspring1_com
19 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.happyhotellz.com
:80:happyhotellz.com D:\wwwroot\www_happyhotellz_com
20 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.baronyhotels.com
:80:baronyhotel.test.wintour.cn D:\wwwroot\www_baronyhotels1_com
21 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:perthshire.fossilwood.baronyhotels.com D:\wwwroot\www_baronyhotels_UK_com
22 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:shanghai.lanhai.test.wintour.cn
:80:guangrao.lanhai.cn D:\wwwroot\www_bhghotels_bolong_com
23 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:resortintime.test.wintour.cn D:\unuse\20130116\www_resortintime_com
24 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:fox.hotels.wintour.cn D:\wwwroot\fox
25 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:huangshan.baronyhotels.com
:80:huangshan.test.wintour.cn
:80:aq.baronyhotels.com D:\wwwroot\www_baronyhotels_huangshan_com
26 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.mediterraneanhotel.com.cn
:80:royal.test.wintour.cn D:\wwwroot\www_mediterraneanhotel_com_cn1
27 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:vip.hkmohotel.com
:80:viphkmo.test.wintour.cn D:\wwwroot\vip_hrcworldwide_com
28 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.grand-royalhotel.com D:\wwwroot\www_grand-royalhotel1_com
29 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.dytmgm.com
:80:dytmgm.com
:80:dytnew.test.wintour.cn D:\wwwroot-1\www_dytmgm_new
30 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:test.cdessenhotel.com D:\wwwroot\www_yichenghotel_com
31 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:weihai.baronyhotels.com D:\wwwroot\www_baronyhotels_weihai_com
32 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:dgeahotel.test.wintour.cn D:\wwwroot\www_dgeahotel1_com
33 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:kashgar.baronyhotels.com
:80:kashgar.test.wintour.cn D:\wwwroot\www_baronyhotels_kashi_ShuleBowang_com
34 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.royalmediterranean-hotel.com
:80:royalmediterranean-hotel.com
:80:dzhhotel.test.wintour.cn D:\wwwroot\www_royalmediterranean-hotel_com
35 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.sovereignhotelzj.com D:\wwwroot\www_sovereignhotelzj_com
36 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.hkmohotel.com
:80:hkmohotel.com D:\wwwroot-1\www_hkmohotel_com
37 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:guangrao.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_guangrao_com
38 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:zs.jhyhotels.com D:\wwwroot\www_jhyhotel_hz_com
39 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.vvhotspring.com
:80:vvhotspring.com D:\wwwroot\www_vvhotspring1_com
40 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:sgla.test.wintour.cn D:\wwwroot\www_shangrilaassociation_org
41 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:hemchotel.test.wintour.cn D:\wwwroot\www_hemchotel1_com
42 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:laoshan.lanhai.cn
:80:laoshan.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_laoshan_com
43 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:demo.hotels.wintour.cn D:\wwwroot\demo_hotel_wintour_cn
44 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:linyi.lanhai.cn
:80:linyi.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_linyi_com
45 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.royalgardenhotel.com.cn
:80:www.royalgardenhotel.cn
:80:royalgardenhotel.com.cn
:80:royalgardenhotel.cn D:\wwwroot\www_royalgardenhotel_com_cn
46 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.goldtimehotel.com
:80:goldtimehotel.test.wintour.cn D:\wwwroot\www_goldtimehotel_com
47 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:junyujiudian.com
:80:www.junyujiudian.com
:80:junyuhotel.test.wintour.cn D:\wwwroot\www_imperialhotel_com
48 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:xiamen.baronyhotels.com
:80:xiamen.test.wintour.cn D:\wwwroot\www_baronyhotels_xiamen_com
49 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.ithotel.cn
:80:ithotel.cn D:\wwwroot-1\www_ithotel_com
50 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:jj.dgeahotel.com
:80:dghotel.jj.test.wintour.cn D:\wwwroot\www_dgeahotel1_com\
51 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:panyuhotel.test.wintour.cn D:\wwwroot\111\www_panyuhotel_com
52 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.gdhp.net.cn
:80:gdhp.test.wintour.cn D:\wwwroot-1\www_gdhp_cn
53 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:hjjy.test.wintour.cn D:\wwwroot-1\www2_hjgrand_com
54 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.zhixinhotel.com
:80:zhixinhotel.com D:\wwwroot\www_zhixinhotel_com
55 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.mandarinspringhotel.com
:80:mandarinspringhotel.com D:\wwwroot\www_mandarinspringhotel_com
56 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:yangshuoholiday.test.wintour.cn D:\wwwroot-1\www_yangshuo_com
57 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.silversoundhotel.com D:\wwwroot-1\www_yyresort_com
58 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:apps.wintour.cn D:\wwwroot-1\apps
59 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:jzl.resortgp.com
:80:jzl.test.wintour.cn D:\wwwroot\www_resortgp1_com
60 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.greenlake-hotel.com
:80:greenlake-hotel.com D:\wwwroot\www_greenlake-hotel_com
61 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.ragazmanor.cn
:80:ragazmanor.cn D:\wwwroot-1\www_ragazhotspring_com
62 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:huangdao.lanhai.cn
:80:huangdao.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_huangdao_com
63 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:tez.grand.baronyhotels.com
:80:tez.test.wintour.cn D:\wwwroot\www_baronyhotels_taierzhuang_com_demo
64 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.redstarhotel.com.cn
:80:www.redstarhotel.com
:80:www.redstarhotel.cn
:80:redstarhotel.com.cn
:80:redstarhotel.com
:80:redstarhotel.cn D:\wwwroot\www_redstarhotel1_com_cn
65 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.dcgj-hotel.com D:\wwwroot\www_dcgj-hotel1_com
66 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.sci-hotel.com D:\wwwroot\www_dcgj-hotel1_com
67 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.daysunparkhotel.com
:80:daysunparkhotel.com D:\wwwroot\www_daysunparkhotel1_com
68 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:daysuninternationalhotel.com
:80:www.daysuninternationalhotel.com D:\wwwroot\www_daysunritzhotel_com
69 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:vip.hkmohotel.com D:\wwwroot\vip_hrcworldwide_com
70 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.guangzhouhotel.cn
:80:guangzhouhotel.cn
:80:gzhotel.test.wintour.cn D:\wwwroot\www_guangzhouhotel_cn
71 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:guiyang.test.wintour.cn
:80:guiyang.baronyhotels.com D:\wwwroot\www_baronyhotels_guiyang_com
72 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.glplaza.com
:80:glplaza.com d:\wwwroot\www_glplaza_com
73 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:gbvh.test.wintour.cn D:\wwwroot\www_gbvh_com
74 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:xinyue.lanhai.cn
:80:xinyue.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_xinyue_com
75 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.ramadaplazagz.com
:80:ramadaplazagz.com D:\wwwroot\www_ramadaplazagz1_com
76 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.hjt-hotel.com
:80:hjt-hotel.com D:\wwwroot\www_hjt-hotel_com
77 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:hz1.jhyhotels.com D:\wwwroot\www_jhyhotel_hz_com
78 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:zhoushan.grand.baronyhotels.com
:80:zhoushan.test.wintour.cn D:\wwwroot\www_baronyhotels_zhoushan_com
79 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:shizhong.lanhai.cn
:80:shizhong.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_shizhong_com
80 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.huidonghotel.com
:80:huidonghotel.com D:\wwwroot\www_huidonghotel_com
81 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.harbourviewhotel.com
:80:harbourviewhotel.com D:\wwwroot\www_harbourviewhotel_com
82 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:licheng.lanhai.cn
:80:licheng.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_licheng_com
83 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:kashgartarim.baronyhotels.com
:80:kashgartarim.test.wintour.cn D:\wwwroot\www_baronyhotels_kashi_com
84 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.hjgrand.com
:80:hjgrand.com
:80:hjjy.test.wintour.cn D:\wwwroot-1\www2_hjgrand_com
85 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:wt.test.wintour.cn D:\wwwroot-1\www_wintour_cn_deom
86 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.lzjdhotel.com
:80:lzjdhotel.com D:\wwwroot\www_lzjdhotel_com
87 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.zobonarthotel.com D:\wwwroot\www_zobonarthotel_com
88 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.guiyushanfang.com
:80:guiyushanfang.com D:\wwwroot\www_guiyushanfang_com
89 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:huangshan.boutique.baronyhotels.com
:80:boutique.test.wintour.cn D:\wwwroot\www_baronyhotels_huangshan_boutique_com
90 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:nlpkg130305.hct.hkmohotel.com D:\wwwroot\newsletter\ct\nlpkg130305
91 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:nlpkg130524.hct.hkmohotel.com D:\wwwroot\newsletter\ct\nlpkg130524
92 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:nlpkg130327.hct.hkmohotel.com D:\wwwroot\newsletter\ct\nlpkg130327
93 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:nlpkg130205.hct.hkmohotel.com D:\wwwroot\newsletter\ct\nlpkg130205
94 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.lnhhospitality.com.cn
:80:lnhhospitality.com.cn D:\wwwroot-1\www_lnhhospitality_com_cn
95 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.soogiehotel.com D:\wwwroot-1\www_soogiehotel_com
96 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.jianliharmonyhotel.com
:80:jianliharmonyhotel.com
:80:jianli.test.wintour.cn D:\wwwroot\www_jianliharmonyhotel_com
97 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.hafreehotel.com
:80:hafreehotel.com D:\wwwroot\www_hafreehotel_com
98 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:wakingtownhotel.test.wintour.cn D:\wwwroot-1\www_wakingtown-hotel1_com
99 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:xicheng.lanhai.cn
:80:xicheng.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_xicheng_com
100 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:dongcheng.lanhai.cn
:80:dongcheng.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_dongcheng_com
101 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:yueyang.baronyhotels.com
:80:yueyang.test.wintour.cn D:\wwwroot\www_baronyhotels_yueyang_com
102 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.gwihotel.com
:80:gwihotel.com D:\wwwroot\grandwinner_hotels_wintour_cn
103 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.krdhotel.com
:80:krdhotel.com
:80:krdhotel.test.wintour.cn D:\wwwroot\www_krdhotel_com
104 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.oceanhotel.com.cn
:80:oceanhotel.com.cn
:80:oceanhotel.test.wintour.cn D:\wwwroot\www_oceanhotel1_com_cn
105 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.yfhotels.com
:80:yfhotels.com D:\wwwroot\www_yf-hotel_com_cn
106 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:zibo.lanhai.test.wintour.cn D:\wwwroot\www_bhghotels_zibo_com
107 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:calvinhotel.test.wintour.cn
:80:calvinhotel.com
:80:www.calvinhotel.com D:\wwwroot\www_calvinhotel_com
108 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:payment.hkmohotel.com D:\wwwroot\payment_hkmohotel_com
109 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.junshanhotel.com
:80:junshanhotel.com D:\wwwroot\www_junshanhotel1_com
110 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.goldensunhotel.cn
:80:goldensunhotel.cn
:80:www.goldensun-hotel.cn D:\wwwroot\www_goldensunhotel1_cn
111 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.vilihotel.com
:80:vilihotel.com D:\wwwroot\www_vilihotel_com
112 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:yingbin.test.wintour.cn D:\wwwroot\www_yingbinhotel_cn
113 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:napier.baronyhotels.com
:80:napier.test.wintour.cn D:\wwwroot\www_baronyhotels_NewZealand_com
114 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:member.hkmohotel.com
:80:member.test.wintour.cn D:\wwwroot\vip_hkmohotel
115 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:jianguo.test.wintour.cn D:\wwwroot\www_jianguohotelgz_com
116 IUSR_WINTOUR-1FFC45A ;Tn5.0{Q(~3$:b :80:www.suichanghotel.com
:80:suichanghotel.com


开放、订单、数据。

修复方案:

紧急处理

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:16

确认时间:2014-11-02 08:49

厂商回复:

CNVD确认并复现所述情况,已经由CNVD尝试电话联系网站管理厂商,但对方称不需要修复,直接通报其官方邮箱。

最新状态:

暂无