当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2016-0211911

漏洞标题:养天和大药房某系统GetShell影响百万会员及上亿交易流水(存在入侵痕迹)

相关厂商:养天和大药房连锁有限公司

漏洞作者: 路人甲

提交时间:2016-05-23 19:40

修复时间:2016-07-10 10:20

公开时间:2016-07-10 10:20

漏洞类型:系统/服务补丁不及时

危害等级:高

自评Rank:15

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2016-05-23: 细节已通知厂商并且等待厂商处理中
2016-05-26: 厂商已经确认,细节仅向厂商公开
2016-06-05: 细节向核心白帽子及相关领域专家公开
2016-06-15: 细节向普通白帽子公开
2016-06-25: 细节向实习白帽子公开
2016-07-10: 细节向公众公开

简要描述:

...

详细说明:

mask 区域
1.://**.**.**/infosys/


反序列getshell,引用入侵shell:

mask 区域
1.://**.**.**/bea_wls_internal/css.jsp


密码:123123
JDBC:

<code><url>jdbc:oracle:thin:@**.**.**.**:1521:ora8</url>
<driver-name>oracle.jdbc.OracleDriver</driver-name>
<properties>
<property>
<name>user</name>
<value>gspstore_bj</value>
</property>
</properties>
<password-encrypted>{AES}07tD+0kPpDK2TTKaS0UGE8MZepTcz3kbt62bYRHZ7hw=</password-encrypted>

</code>

SYS	AUD$	244091597
GSPSTORE T_SITE_CYCLE_GOODS 126275200
GSPSTORE T_SITE_RETAIL_DETAIL 105073214
GSPSTORE T_BILL_DETAIL 51244165
GSPSTORE T_SITE_RETAIL_PAYMENT 50683163
GSPSTORE T_SITE_RETAIL 47417828
GSPSTORE T_SITE_STOCK_MONTH_ACC 42098119
GSPSTORE T_DAILY_SITE_BILL 37983134
GSP_CEN T_GOODS_ALIAS_TO_DOWNLOAD 37232003
GSPSTORE T_DEPT_GOODS 36406645
GSPSTORE T_SITE_PLAN 36213971
GSP_CEN T_SITE_CYCLE_GOODS 28530798
GSPSTORE T_SITE_BILL_DETAIL 27998401
GSPSTORE T_SITE_PLAN_DETAIL 27630504
GSPSTORE T_BILL_PACK_DETAIL 22361803
GSPSTORE T_BILL_SCAN_DETAIL 21690945
GSPSTORE T_DAILY_SITE_STORE 16322314
GSPSTORE_HAI T_SITE_RETAIL_DETAIL 15801848
GSPSTORE_HAI T_MEMBER_TO_DOWNLOAD_BACK 15765245
GSPSTORE T_DAILY_SITE_STORE_0525 14617186
GSPSTORE T_UPLOAD_BILL_DETAIL 13956997
GSP_CEN T_SITE_RETAIL_PAYMENT 13826481
GSPSTORE T_GOODS_CURING_RECORD_DETAIL 12976170
GSPSTORE T_ELE_BILL_GOODS 12878570
GSPSTORE T_SITE_PRESC_DETAIL 12595571
GSPSTORE T_SITE_CYCLE_COMP 11728081
GSPSTORE_HAI T_DAILY_SITE_STORE 10381424
GSPSTORE T_SITE_CYCLE_DETAIL 10236232
GSPSTORE T_SALE_BILL_PAGE 10028525
GSPSTORE_HAI T_BILL_DETAIL 10002184
GSPSTORE T_DEPT_BILL_DETAIL_TO_DL 9874774
GSPSTORE_HAI T_SITE_RETAIL_PAYMENT 9614824
GSPSTORE_HAI T_SITE_RETAIL 9084124
GSPSTORE T_SITE_PRESC 8685341
GSP_CEN T_SITE_BILL_DETAIL 8657001
GSPSTORE T_MEMBER_INTEGRAL_RECORD 8459560
GSPSTORE_HAI T_SITE_CYCLE_GOODS 7865334
GSPSTORE_HAI T_SITE_STOCK_MONTH_ACC 7453726
GSPSTORE T_BILL_PAGE 7019788
GSPSTORE T_MEMBER_TO_DL 6822569
GSPSTORE T_PERIOD_STOCK 6496463
GSPSTORE T_SITE_CYCLE_SCAN 6233817
GSPSTORE T_DL_BILL_DETAIL 5669968
GSPSTORE T_MEMBER_TO_DOWNLOAD 5637096
GSPSTORE_HAI T_SITE_BILL_DETAIL 5462601
GSPSTORE T_CUSTOMER_LASTPRICE 4601628
GSPSTORE T_GOODS_CURING_RECORD_BK 4378414
GSPSTORE T_STORE_AMOUNT 4263913
GSPSTORE T_CYCLECOUNT_GOODS 3768931
GSPSTORE_HAI T_SITE_PLAN_DETAIL 3642774
GSP_CEN T_SITE_CYCLE_COMP 3543343
GSPSTORE_HAI T_BILL_SCAN_DETAIL 3449195
GSPSTORE_HAI T_BILL_PACK_DETAIL 3383941
GSPSTORE T_BILL_HEADER 3333042
GSPSTORE T_STOCK 3272638
GSPSTORE T_SITE_STORE 3165085
GSPSTORE T_SITE_STOCK_ACC 3163466
GSPSTORE T_CHINESE_GOODS_CLEAR_RECORD 3075998
GSPSTORE T_BILL_HEADER_20151221 2986843
GSP_CEN T_SITE_CYCLE_DETAIL 2777283
GSPSTORE T_MEM_NEWS_GET 2675662
GSPSTORE T_BILL_HEADER_20151221HS 2422883
GSPSTORE T_SITE_CYCLE_ACTUAL 2178096
GSPSTORE_HAI T_MEMBER_INTEGRAL_RECORD 2103280
GSPSTORE T_GOODS_INFO_TO_DOWNLOAD 2051571
GSPSTORE_HAI T_MEMBER_TO_DOWNLOAD 2040914
GSPSTORE T_STORE_IN_RECV_DETAIL 1981382
GSP_CEN T_MEMBER_TO_DOWNLOAD 1943485
GSPSTORE_HAI T_SITE_PLAN 1906212
GSP_CEN T_SITE_CYCLE_ACTUAL 1884911
GSPSTORE_HAI T_DEPT_GOODS 1878150
GSPSTORE T_QA_DETAIL 1796984
GSPSTORE T_BILL_PACK 1775133
MIAHR T_HR_PAY_MONTH_DETAIL 1769784
GSPSTORE_HAI T_SITE_CYCLE_COMP 1763051
GSPSTORE T_SITE_PRESC_DETAIL_DEL2013 1761850
GSPSTORE_HAI T_ELE_BILL_GOODS 1740698
GSPSTORE T_SITE_AWARD_METHOD_TO_DL 1717999
GSPSTORE T_DEPT_BILL_RECORD 1714143
GSPSTORE_HAI T_GOODS_INFO_TO_DOWNLOAD 1710610
GSPSTORE T_SITE_BILL 1708585
GSPSTORE_HAI T_SITE_CYCLE_DETAIL 1674821
GSPSTORE T_SITE_PER_ATTENDANCE 1546785
GSPSTORE T_STORE_GOODS_SERIAL 1494070
GSPSTORE T_GOODS_BATCH 1483926
GSPSTORE T_SITE_STOCK 1482390
GSPSTORE_HAI T_BILL_PAGE 1474279
GSPSTORE_HAI T_GOODS_CURING_RECORD_DETAIL 1473185
GSPSTORE_HAI T_SALE_BILL_PAGE 1461846
SYS WRI$_OPTSTAT_HISTGRM_HISTORY 1461320
GSPSTORE_HAI T_SITE_PRESC_DETAIL 1433290
GSPSTORE T_MEM_NEWS_TOGET 1368955
GSPSTORE_HAI T_SITE_CYCLE_SCAN 1341096
GSPSTORE_HAI T_SITE_PRESC 1320565
GSPSTORE T_SITE_PRESC_BACK 1280690
SYS WRH$_ACTIVE_SESSION_HISTORY 1257271
GSPSTORE T_SITE_NOTIFY_SITE 1068358
HOSP T_STOCK_COM 1053200
GSPSTORE T_STOCK_COM 1053200
GSPSTORE T_MIASERVICE_LOG 1031901
GSPSTORE T_DAILY_MOVE_BILL 1016207
GSPSTORE_SHOP T_GOODS_INFO_TO_DOWNLOAD 904261
GSPSTORE T_STORE_GOODS_EXTRA 868498
MIAHR T_MOD_MSG 849098
GSPSTORE T_MEMBER 843458
GSPSTORE T_DEPT_MEMBER 841752
GSPSTORE T_SITE_RETURN_BILL_DETAIL 834008
GSPSTORE_BJ2 T_SITE_RETAIL_DETAIL 832492
GSPSTORE T_STORE_STATION_SEND_DETAIL 812698
GSPSTORE T_SITE_PATH_BILL_DETAIL 809888
GSPSTORE T_BILL_HEADER_EXTRA 806997
GSPSTORE_HAI T_BILL_HEADER 765713
GSPSTORE_HAI T_CUSTOMER_LASTPRICE 736505
GSP_CEN T_SITE_NOTIFY_SITE 720193
GSP_CEN T_GOODS_INFO_TO_DOWNLOAD 706754
GSPSTORE_HAI T_DAILY_STOCK_DETAIL 688461
GSPSTORE_HAI T_PERIOD_STOCK 682999
GSPSTORE_HAI T_STORE_AMOUNT 675268
GSPSTORE_HAI T_STORE_IN_RECV_DETAIL 643873
GSPSTORE_HAI T_SITE_STORE 625079
GSPSTORE_HAI T_QA_DETAIL 616380
GSPSTORE T_QA_PAGE 614200
GSPSTORE T_STORE_SALE 612941
HOSP T_SITE_CYCLE_GOODS 599111
GSPSTORE_HAI T_STOCK 583994
GSPSTORE T_GOODS_CURING_RECORD 578704
GSPSTORE T_DEPT_BILL_TO_DL 559922
GSPSTORE T_SITE_DAILY_TAKINGS 559403
GSP_CEN T_MEMBER_INTEGRAL_RECORD 555050
GSPSTORE_HAI T_GOODS_BATCH 543134
GSPSTORE T_GOODS_PRICE 531282
GSPSTORE_BJ2 T_SITE_CYCLE_GOODS 529282
GSPSTORE T_MEM_LOTTERY_DEPT_TEMP 525679
GSPSTORE T_GOODS_ALIAS_TO_DOWNLOAD 509732
GSPSTORE T_MEMBER_CUT 502987
GSPSTORE T_MESSAGE_SEND_RECORD 492180
GSPSTORE T_STOCK_ACC 474367
GSPSTORE_HAI T_GOODS_ALIAS_TO_DOWNLOAD 471318
GSPSTORE T_BUYPLAN_DETAIL 471307
GSPSTORE T_CYCLECOUNT_DETAIL 468126
GSPSTORE T_STORE_IN_RECV 453563
GSPSTORE T_SITE_PLAN_VIEW 447777
GSPSTORE T_ART_PRICE 435338
GSPSTORE T_PENDING_BILL_AP 416101
GSPSTORE T_QA_HEADER 410714
GSPSTORE T_DAILY_STOCK_DETAIL 401518
GSPSTORE T_RETAIL_FILE_UPLOAD 397617
GSP_CEN T_SITE_BILL 396865
GSPSTORE_BJ2 T_BILL_DETAIL 389989
GSPSTORE_HAI T_SITE_BILL 382755
GSPSTORE_HAI T_DAILY_STOCK 382666
MIAHR T_SYS_LOG 377084
GSP_CEN T_MEM_TEMP_GOODS_CLASS 376983
GSPSTORE SENDMSGTABLE 375777
MIAHR T_OA_TASK_HANDLER 370691
GSPSTORE T_STORE_RACKNO 369323
GSPSTORE T_UPLOAD_BILL 369076
GSPSTORE T_DAILY_STOCK_DETAIL_0525 368330
GSPSTORE_BJ2 T_SITE_RETAIL 367714
GSPSTORE_BJ2 T_SITE_RETAIL_PAYMENT 365319
GSPSTORE_HAI T_MEM_NEWS_TOGET 363900
MIAHR T_OA_TASK 363331
MIAHR T_OA_STEP 362375
GSP_CEN T_BILL_TO_COPY 359854
GSPSTORE T_BILL_TO_COPY 359854
GSPSTORE T_GOODS_SERIAL_INFO 351213
SYS HISTGRM$ 336620
SYS SOURCE$ 331941
GSPSTORE T_SITE_RETURN_BILL_PAGE 313877
GSPSTORE SENDMSG_BACK 306801
GSPSTORE T_ART_MEM_PRICE 302289
GSPSTORE T_SITE_RETURN_BILL 297573
GSPSTORE_HAI T_SITE_STOCK 295205
GSPSTORE T_TEST_GOODS_SERIAL_INFO 293103
GSPSTORE T_W_S 291443
GSPSTORE_HAI T_DEPT_BILL_RECORD 290020
GSP_CEN T_BILL_DETAIL 284670
GSPSTORE T_DAILY_AUTO_BILL 284489
GSPSTORE_SHOP T_MEMBER_TO_DOWNLOAD 275958
GSPSTORE T_SITE_PLAN_HEADER 275360
SYS WRI$_ADV_MESSAGE_GROUPS 272323
GSPSTORE T_USER_SITE_TRANS 271843
GSPSTORE_HAI T_BILL_PACK 271592
GSPSTORE T_DAILY_PENDING_BILL 263320
GSPSTORE T_ART_PRICE_TO_DL 259311
GSPSTORE_SHOP T_BILL_DETAIL 257262
GSPSTORE T_WWW_USER_SITE_TRANS 256936
GSPSTORE_HAI T_SITE_CYCLE_ACTUAL 256338
SYS WRH$_EVENT_HISTOGRAM 251392
GSPSTORE T_DL_BILL_SITE 250251
GSPSTORE T_DL_BILL 250250


A2.png

漏洞证明:

SYS	AUD$	244091597
GSPSTORE T_SITE_CYCLE_GOODS 126275200
GSPSTORE T_SITE_RETAIL_DETAIL 105073214
GSPSTORE T_BILL_DETAIL 51244165
GSPSTORE T_SITE_RETAIL_PAYMENT 50683163
GSPSTORE T_SITE_RETAIL 47417828
GSPSTORE T_SITE_STOCK_MONTH_ACC 42098119
GSPSTORE T_DAILY_SITE_BILL 37983134
GSP_CEN T_GOODS_ALIAS_TO_DOWNLOAD 37232003
GSPSTORE T_DEPT_GOODS 36406645
GSPSTORE T_SITE_PLAN 36213971
GSP_CEN T_SITE_CYCLE_GOODS 28530798
GSPSTORE T_SITE_BILL_DETAIL 27998401
GSPSTORE T_SITE_PLAN_DETAIL 27630504
GSPSTORE T_BILL_PACK_DETAIL 22361803
GSPSTORE T_BILL_SCAN_DETAIL 21690945
GSPSTORE T_DAILY_SITE_STORE 16322314
GSPSTORE_HAI T_SITE_RETAIL_DETAIL 15801848
GSPSTORE_HAI T_MEMBER_TO_DOWNLOAD_BACK 15765245
GSPSTORE T_DAILY_SITE_STORE_0525 14617186
GSPSTORE T_UPLOAD_BILL_DETAIL 13956997
GSP_CEN T_SITE_RETAIL_PAYMENT 13826481
GSPSTORE T_GOODS_CURING_RECORD_DETAIL 12976170
GSPSTORE T_ELE_BILL_GOODS 12878570
GSPSTORE T_SITE_PRESC_DETAIL 12595571
GSPSTORE T_SITE_CYCLE_COMP 11728081
GSPSTORE_HAI T_DAILY_SITE_STORE 10381424
GSPSTORE T_SITE_CYCLE_DETAIL 10236232
GSPSTORE T_SALE_BILL_PAGE 10028525
GSPSTORE_HAI T_BILL_DETAIL 10002184
GSPSTORE T_DEPT_BILL_DETAIL_TO_DL 9874774
GSPSTORE_HAI T_SITE_RETAIL_PAYMENT 9614824
GSPSTORE_HAI T_SITE_RETAIL 9084124
GSPSTORE T_SITE_PRESC 8685341
GSP_CEN T_SITE_BILL_DETAIL 8657001
GSPSTORE T_MEMBER_INTEGRAL_RECORD 8459560
GSPSTORE_HAI T_SITE_CYCLE_GOODS 7865334
GSPSTORE_HAI T_SITE_STOCK_MONTH_ACC 7453726
GSPSTORE T_BILL_PAGE 7019788
GSPSTORE T_MEMBER_TO_DL 6822569
GSPSTORE T_PERIOD_STOCK 6496463
GSPSTORE T_SITE_CYCLE_SCAN 6233817
GSPSTORE T_DL_BILL_DETAIL 5669968
GSPSTORE T_MEMBER_TO_DOWNLOAD 5637096
GSPSTORE_HAI T_SITE_BILL_DETAIL 5462601
GSPSTORE T_CUSTOMER_LASTPRICE 4601628
GSPSTORE T_GOODS_CURING_RECORD_BK 4378414
GSPSTORE T_STORE_AMOUNT 4263913
GSPSTORE T_CYCLECOUNT_GOODS 3768931
GSPSTORE_HAI T_SITE_PLAN_DETAIL 3642774
GSP_CEN T_SITE_CYCLE_COMP 3543343
GSPSTORE_HAI T_BILL_SCAN_DETAIL 3449195
GSPSTORE_HAI T_BILL_PACK_DETAIL 3383941
GSPSTORE T_BILL_HEADER 3333042
GSPSTORE T_STOCK 3272638
GSPSTORE T_SITE_STORE 3165085
GSPSTORE T_SITE_STOCK_ACC 3163466
GSPSTORE T_CHINESE_GOODS_CLEAR_RECORD 3075998
GSPSTORE T_BILL_HEADER_20151221 2986843
GSP_CEN T_SITE_CYCLE_DETAIL 2777283
GSPSTORE T_MEM_NEWS_GET 2675662
GSPSTORE T_BILL_HEADER_20151221HS 2422883
GSPSTORE T_SITE_CYCLE_ACTUAL 2178096
GSPSTORE_HAI T_MEMBER_INTEGRAL_RECORD 2103280
GSPSTORE T_GOODS_INFO_TO_DOWNLOAD 2051571
GSPSTORE_HAI T_MEMBER_TO_DOWNLOAD 2040914
GSPSTORE T_STORE_IN_RECV_DETAIL 1981382
GSP_CEN T_MEMBER_TO_DOWNLOAD 1943485
GSPSTORE_HAI T_SITE_PLAN 1906212
GSP_CEN T_SITE_CYCLE_ACTUAL 1884911
GSPSTORE_HAI T_DEPT_GOODS 1878150
GSPSTORE T_QA_DETAIL 1796984
GSPSTORE T_BILL_PACK 1775133
MIAHR T_HR_PAY_MONTH_DETAIL 1769784
GSPSTORE_HAI T_SITE_CYCLE_COMP 1763051
GSPSTORE T_SITE_PRESC_DETAIL_DEL2013 1761850
GSPSTORE_HAI T_ELE_BILL_GOODS 1740698
GSPSTORE T_SITE_AWARD_METHOD_TO_DL 1717999
GSPSTORE T_DEPT_BILL_RECORD 1714143
GSPSTORE_HAI T_GOODS_INFO_TO_DOWNLOAD 1710610
GSPSTORE T_SITE_BILL 1708585
GSPSTORE_HAI T_SITE_CYCLE_DETAIL 1674821
GSPSTORE T_SITE_PER_ATTENDANCE 1546785
GSPSTORE T_STORE_GOODS_SERIAL 1494070
GSPSTORE T_GOODS_BATCH 1483926
GSPSTORE T_SITE_STOCK 1482390
GSPSTORE_HAI T_BILL_PAGE 1474279
GSPSTORE_HAI T_GOODS_CURING_RECORD_DETAIL 1473185
GSPSTORE_HAI T_SALE_BILL_PAGE 1461846
SYS WRI$_OPTSTAT_HISTGRM_HISTORY 1461320
GSPSTORE_HAI T_SITE_PRESC_DETAIL 1433290
GSPSTORE T_MEM_NEWS_TOGET 1368955
GSPSTORE_HAI T_SITE_CYCLE_SCAN 1341096
GSPSTORE_HAI T_SITE_PRESC 1320565
GSPSTORE T_SITE_PRESC_BACK 1280690
SYS WRH$_ACTIVE_SESSION_HISTORY 1257271
GSPSTORE T_SITE_NOTIFY_SITE 1068358
HOSP T_STOCK_COM 1053200
GSPSTORE T_STOCK_COM 1053200
GSPSTORE T_MIASERVICE_LOG 1031901
GSPSTORE T_DAILY_MOVE_BILL 1016207
GSPSTORE_SHOP T_GOODS_INFO_TO_DOWNLOAD 904261
GSPSTORE T_STORE_GOODS_EXTRA 868498
MIAHR T_MOD_MSG 849098
GSPSTORE T_MEMBER 843458
GSPSTORE T_DEPT_MEMBER 841752
GSPSTORE T_SITE_RETURN_BILL_DETAIL 834008
GSPSTORE_BJ2 T_SITE_RETAIL_DETAIL 832492
GSPSTORE T_STORE_STATION_SEND_DETAIL 812698
GSPSTORE T_SITE_PATH_BILL_DETAIL 809888
GSPSTORE T_BILL_HEADER_EXTRA 806997
GSPSTORE_HAI T_BILL_HEADER 765713
GSPSTORE_HAI T_CUSTOMER_LASTPRICE 736505
GSP_CEN T_SITE_NOTIFY_SITE 720193
GSP_CEN T_GOODS_INFO_TO_DOWNLOAD 706754
GSPSTORE_HAI T_DAILY_STOCK_DETAIL 688461
GSPSTORE_HAI T_PERIOD_STOCK 682999
GSPSTORE_HAI T_STORE_AMOUNT 675268
GSPSTORE_HAI T_STORE_IN_RECV_DETAIL 643873
GSPSTORE_HAI T_SITE_STORE 625079
GSPSTORE_HAI T_QA_DETAIL 616380
GSPSTORE T_QA_PAGE 614200
GSPSTORE T_STORE_SALE 612941
HOSP T_SITE_CYCLE_GOODS 599111
GSPSTORE_HAI T_STOCK 583994
GSPSTORE T_GOODS_CURING_RECORD 578704
GSPSTORE T_DEPT_BILL_TO_DL 559922
GSPSTORE T_SITE_DAILY_TAKINGS 559403
GSP_CEN T_MEMBER_INTEGRAL_RECORD 555050
GSPSTORE_HAI T_GOODS_BATCH 543134
GSPSTORE T_GOODS_PRICE 531282
GSPSTORE_BJ2 T_SITE_CYCLE_GOODS 529282
GSPSTORE T_MEM_LOTTERY_DEPT_TEMP 525679
GSPSTORE T_GOODS_ALIAS_TO_DOWNLOAD 509732
GSPSTORE T_MEMBER_CUT 502987
GSPSTORE T_MESSAGE_SEND_RECORD 492180
GSPSTORE T_STOCK_ACC 474367
GSPSTORE_HAI T_GOODS_ALIAS_TO_DOWNLOAD 471318
GSPSTORE T_BUYPLAN_DETAIL 471307
GSPSTORE T_CYCLECOUNT_DETAIL 468126
GSPSTORE T_STORE_IN_RECV 453563
GSPSTORE T_SITE_PLAN_VIEW 447777
GSPSTORE T_ART_PRICE 435338
GSPSTORE T_PENDING_BILL_AP 416101
GSPSTORE T_QA_HEADER 410714
GSPSTORE T_DAILY_STOCK_DETAIL 401518
GSPSTORE T_RETAIL_FILE_UPLOAD 397617
GSP_CEN T_SITE_BILL 396865
GSPSTORE_BJ2 T_BILL_DETAIL 389989
GSPSTORE_HAI T_SITE_BILL 382755
GSPSTORE_HAI T_DAILY_STOCK 382666
MIAHR T_SYS_LOG 377084
GSP_CEN T_MEM_TEMP_GOODS_CLASS 376983
GSPSTORE SENDMSGTABLE 375777
MIAHR T_OA_TASK_HANDLER 370691
GSPSTORE T_STORE_RACKNO 369323
GSPSTORE T_UPLOAD_BILL 369076
GSPSTORE T_DAILY_STOCK_DETAIL_0525 368330
GSPSTORE_BJ2 T_SITE_RETAIL 367714
GSPSTORE_BJ2 T_SITE_RETAIL_PAYMENT 365319
GSPSTORE_HAI T_MEM_NEWS_TOGET 363900
MIAHR T_OA_TASK 363331
MIAHR T_OA_STEP 362375
GSP_CEN T_BILL_TO_COPY 359854
GSPSTORE T_BILL_TO_COPY 359854
GSPSTORE T_GOODS_SERIAL_INFO 351213
SYS HISTGRM$ 336620
SYS SOURCE$ 331941
GSPSTORE T_SITE_RETURN_BILL_PAGE 313877
GSPSTORE SENDMSG_BACK 306801
GSPSTORE T_ART_MEM_PRICE 302289
GSPSTORE T_SITE_RETURN_BILL 297573
GSPSTORE_HAI T_SITE_STOCK 295205
GSPSTORE T_TEST_GOODS_SERIAL_INFO 293103
GSPSTORE T_W_S 291443
GSPSTORE_HAI T_DEPT_BILL_RECORD 290020
GSP_CEN T_BILL_DETAIL 284670
GSPSTORE T_DAILY_AUTO_BILL 284489
GSPSTORE_SHOP T_MEMBER_TO_DOWNLOAD 275958
GSPSTORE T_SITE_PLAN_HEADER 275360
SYS WRI$_ADV_MESSAGE_GROUPS 272323
GSPSTORE T_USER_SITE_TRANS 271843
GSPSTORE_HAI T_BILL_PACK 271592
GSPSTORE T_DAILY_PENDING_BILL 263320
GSPSTORE T_ART_PRICE_TO_DL 259311
GSPSTORE_SHOP T_BILL_DETAIL 257262
GSPSTORE T_WWW_USER_SITE_TRANS 256936
GSPSTORE_HAI T_SITE_CYCLE_ACTUAL 256338
SYS WRH$_EVENT_HISTOGRAM 251392
GSPSTORE T_DL_BILL_SITE 250251
GSPSTORE T_DL_BILL 250250


A2.png

修复方案:

更新补丁

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:11

确认时间:2016-05-26 10:16

厂商回复:

CNVD未直接复现所述情况,暂未建立与网站管理单位的直接处置渠道,待认领。

最新状态:

暂无