当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0105639

漏洞标题：武汉大学梁子湖科学研究观测站大量数据泄漏（涉及银行卡账号，学号，科研数据等等）

相关厂商：武汉大学

漏洞作者： 路人甲

提交时间：2015-04-07 11:39

修复时间：2015-04-13 16:58

公开时间：2015-04-13 16:58

漏洞类型：敏感信息泄露

危害等级：高

自评Rank：20

漏洞状态：已交由第三方合作机构(CCERT教育网应急响应组)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-04-07： 细节已通知厂商并且等待厂商处理中
2015-04-13： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

科研数据，和生态环境有关的数据大量泄漏，研究生银行卡信息，官方邮箱密码等均泄漏，科研数据是和中科院有关的。

详细说明：

注入点：

mask 区域 
1.http://**.**.**/index.jspID_lanmu=1


部分数据表：（可方面数据都很详细）

web application technology: JSP
back-end DBMS: Microsoft SQL Server 2005
Database: ESApp
Table: lanmu_manage
[12 columns]
+-----------------+----------+
| Column          | Type     |
+-----------------+----------+
| CN              | int      |
| flag_name       | nvarchar |
| ID_lanmu        | nvarchar |
| lanmu           | nvarchar |
| leixing_zilanmu | nvarchar |
| lianjie         | nvarchar |
| RC1             | nvarchar |
| RCId            | nvarchar |
| RN              | int      |
| SheetNo         | nvarchar |
| zilanmu         | nvarchar |
| zilianjie       | nvarchar |
+-----------------+----------+
Database: ESApp
Table: S4观测场样地配置信息表_明细
[16 columns]
+-------------------+----------+
| Column            | Type     |
+-------------------+----------+
| CN                | int      |
| RC1               | nvarchar |
| RCId              | nvarchar |
| RN                | int      |
| SampSite_centerEL | decimal  |
| SampSite_centerNL | decimal  |
| SampSiteBeginTm   | nvarchar |
| SampSiteCode      | nvarchar |
| SampSiteEndTm     | nvarchar |
| SampSiteName      | nvarchar |
| SampSiteNote      | nvarchar |
| SampSiteShape     | nvarchar |
| SampSiteSize      | decimal  |
| SampSiteType      | nvarchar |
| SheetNo           | nvarchar |
| siteCode          | nvarchar |
+-------------------+----------+
Database: ESApp
Table: I1分类系统表_明细
[9 columns]
+--------------+----------+
| Column       | Type     |
+--------------+----------+
| ClassCode    | nvarchar |
| ClassName    | nvarchar |
| ClassRank    | nvarchar |
| ClassSysName | nvarchar |
| CN           | int      |
| RC1          | nvarchar |
| RCId         | nvarchar |
| RN           | int      |
| SheetNo      | nvarchar |
+--------------+----------+
Database: ESApp
Table: LA05湖泊微生物调查_明细
[21 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| HH0000  | nvarchar |
| LA0500  | nvarchar |
| LA0502  | int      |
| LA0504  | decimal  |
| LA0506  | decimal  |
| LA0508  | nvarchar |
| LA0510  | int      |
| LA0512  | int      |
| LA0514  | int      |
| LA0516  | int      |
| LA0518  | int      |
| LA0520  | int      |
| MM0000  | int      |
| Rc1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: LA01湖泊浮游植物调查_明细
[24 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| HH0000  | nvarchar |
| LA0100  | nvarchar |
| LA0102  | int      |
| LA0104  | decimal  |
| LA0106  | decimal  |
| LA0108  | nvarchar |
| LA0110  | decimal  |
| LA0112  | decimal  |
| LA0114  | decimal  |
| LA0116  | decimal  |
| LA0118  | decimal  |
| LA0120  | decimal  |
| LA0122  | decimal  |
| LA0124  | decimal  |
| LA0126  | decimal  |
| MM0000  | int      |
| Rc1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: ecoTypeCode_明细
[8 columns]
+-------------+----------+
| Column      | Type     |
+-------------+----------+
| CN          | int      |
| ecoType     | nvarchar |
| ecoTypeCode | nvarchar |
| ecoTypeDesc | nvarchar |
| RC1         | nvarchar |
| RCId        | nvarchar |
| RN          | int      |
| SheetNo     | nvarchar |
+-------------+----------+
Database: ESApp
Table: D33自动站逐月太阳辐射总量及其累计值_明细
[20 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| D3302   | decimal  |
| D3304   | decimal  |
| D3306   | decimal  |
| D3308   | decimal  |
| D3310   | decimal  |
| D3312   | decimal  |
| D3314   | nvarchar |
| D3316   | nvarchar |
| D3318   | nvarchar |
| D3320   | int      |
| D3322   | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: Tg01自动站每日逐时地表温度_明细
[34 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| Tg0102  | decimal  |
| Tg0104  | decimal  |
| Tg0106  | decimal  |
| Tg0108  | decimal  |
| Tg0110  | decimal  |
| Tg0112  | decimal  |
| Tg0114  | decimal  |
| Tg0116  | decimal  |
| Tg0118  | decimal  |
| Tg0120  | decimal  |
| Tg0122  | decimal  |
| Tg0124  | decimal  |
| Tg0126  | decimal  |
| Tg0128  | decimal  |
| Tg0130  | decimal  |
| Tg0132  | decimal  |
| Tg0134  | decimal  |
| Tg0136  | decimal  |
| Tg0138  | decimal  |
| Tg0140  | decimal  |
| Tg0142  | decimal  |
| Tg0144  | decimal  |
| Tg0146  | decimal  |
| Tg0148  | decimal  |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: I2数据集分类表_明细
[10 columns]
+--------------+----------+
| Column       | Type     |
+--------------+----------+
| ClassCode    | nvarchar |
| ClassName    | nvarchar |
| ClassRank    | nvarchar |
| ClassSysName | nvarchar |
| CN           | int      |
| id           | nvarchar |
| RC1          | nvarchar |
| RCId         | nvarchar |
| RN           | int      |
| SheetNo      | nvarchar |
+--------------+----------+
Database: ESApp
Table: disClassCode_明细
[8 columns]
+--------------+----------+
| Column       | Type     |
+--------------+----------+
| CN           | int      |
| DisClass     | nvarchar |
| DisClassCode | nvarchar |
| DisClassDesc | nvarchar |
| RC1          | nvarchar |
| RCId         | nvarchar |
| RN           | int      |
| SheetNo      | nvarchar |
+--------------+----------+
Database: ESApp
Table: M6分析记录表_明细
[17 columns]
+-----------------+----------+
| Column          | Type     |
+-----------------+----------+
| anaCiteInfo     | nvarchar |
| anaInstr        | nvarchar |
| AnaItem         | nvarchar |
| anaMeth         | nvarchar |
| anaNote         | nvarchar |
| anaPerson       | nvarchar |
| anaRepeatNum    | int      |
| anaStand        | nvarchar |
| anaSubItem      | nvarchar |
| anaTempExtent   | nvarchar |
| CN              | int      |
| RC1             | nvarchar |
| RCId            | nvarchar |
| RN              | int      |
| SheetNo         | nvarchar |
| standSampleName | nvarchar |
| standSampleNo   | nvarchar |
+-----------------+----------+
Database: ESApp
Table: HB2自动站逐日水气压_明细
[12 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MAX000  | decimal  |
| MEAN00  | decimal  |
| MIN000  | decimal  |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: M8质控方法基本信息表_明细
[12 columns]
+-----------------+----------+
| Column          | Type     |
+-----------------+----------+
| CN              | int      |
| ErrDataNote     | nvarchar |
| id              | nvarchar |
| methQCStep1Desc | nvarchar |
| methQCStep2Desc | nvarchar |
| methQCStep3Desc | nvarchar |
| methQCStepNote  | nvarchar |
| NullDataNote    | nvarchar |
| RC1             | nvarchar |
| RCId            | nvarchar |
| RN              | int      |
| SheetNo         | nvarchar |
+-----------------+----------+
Database: ESApp
Table: TD1自动站每日逐时露点温度_明细
[34 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| TD102   | decimal  |
| TD104   | decimal  |
| TD106   | decimal  |
| TD108   | decimal  |
| TD110   | decimal  |
| TD112   | decimal  |
| TD114   | decimal  |
| TD116   | decimal  |
| TD118   | decimal  |
| TD120   | decimal  |
| TD122   | decimal  |
| TD124   | decimal  |
| TD126   | decimal  |
| TD128   | decimal  |
| TD130   | decimal  |
| TD132   | decimal  |
| TD134   | decimal  |
| TD136   | decimal  |
| TD138   | decimal  |
| TD140   | decimal  |
| TD142   | decimal  |
| TD144   | decimal  |
| TD146   | decimal  |
| TD148   | decimal  |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: LA08湖泊浮游植物叶绿素_明细
[16 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| HH0000  | nvarchar |
| LA0800  | nvarchar |
| LA0802  | int      |
| LA0804  | decimal  |
| LA0806  | decimal  |
| LA0808  | nvarchar |
| LA0810  | decimal  |
| MM0000  | int      |
| Rc1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: A1属性信息表_明细
[14 columns]
+------------+----------+
| Column     | Type     |
+------------+----------+
| attrDec    | int      |
| attrDesc   | nvarchar |
| attrID     | nvarchar |
| attrLength | int      |
| attrName   | nvarchar |
| attrSeq    | int      |
| attrType   | nvarchar |
| attrUnit   | nvarchar |
| CN         | int      |
| entID      | nvarchar |
| RC1        | nvarchar |
| RCId       | nvarchar |
| RN         | int      |
| SheetNo    | nvarchar |
+------------+----------+
Database: ESApp
Table: S7外部链接文件信息表_明细
[11 columns]
+-------------+----------+
| Column      | Type     |
+-------------+----------+
| CN          | int      |
| formatName  | nvarchar |
| formatNote  | nvarchar |
| formatVer   | nvarchar |
| outFileName | nvarchar |
| RC1         | nvarchar |
| RCId        | nvarchar |
| relObjCode  | nvarchar |
| relObjType  | nvarchar |
| RN          | int      |
| SheetNo     | nvarchar |
+-------------+----------+
Database: ESApp
Table: D32自动站逐日太阳辐射总量及其累计值_明细
[21 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| D3202   | decimal  |
| D3204   | decimal  |
| D3206   | decimal  |
| D3208   | decimal  |
| D3210   | decimal  |
| D3212   | decimal  |
| D3214   | nvarchar |
| D3216   | nvarchar |
| D3218   | nvarchar |
| D3220   | int      |
| D3222   | int      |
| DD0000  | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: email
[8 columns]
+----------+----------+
| Column   | Type     |
+----------+----------+
| CN       | int      |
| name     | nvarchar |
| password | nvarchar |
| RC1      | nvarchar |
| RCId     | nvarchar |
| RN       | int      |
| SheetNo  | nvarchar |
| stmp     | nvarchar |
+----------+----------+
Database: ESApp
Table: S3观测场自然背景信息表_明细
[24 columns]
+------------------+----------+
| Column           | Type     |
+------------------+----------+
| CN               | int      |
| RC1              | nvarchar |
| RCId             | nvarchar |
| RN               | int      |
| SheetNo          | nvarchar |
| siteCode         | nvarchar |
| siteDrainCapa    | nvarchar |
| siteErosion      | nvarchar |
| siteGeomorph     | nvarchar |
| siteIfIrrigation | nvarchar |
| siteIrriCapa     | nvarchar |
| siteIrriType     | nvarchar |
| siteNonFrost     | nvarchar |
| siteNote         | nvarchar |
| siteOtherWea     | nvarchar |
| sitePreci        | nvarchar |
| siteRunoff       | nvarchar |
| siteSlope        | nvarchar |
| siteSoilParent   | nvarchar |
| siteSoilType     | nvarchar |
| siteSunhour      | nvarchar |
| siteTemp         | nvarchar |
| siteVegiType     | nvarchar |
| siteWaterTable   | nvarchar |
+------------------+----------+
Database: ESApp
Table: 生态分区代码_明细
[8 columns]
+-------------+----------+
| Column      | Type     |
+-------------+----------+
| CN          | int      |
| ecoType     | nvarchar |
| ecoTypeCode | nvarchar |
| ecoTypeDesc | nvarchar |
| RC1         | nvarchar |
| RCId        | nvarchar |
| RN          | int      |
| SheetNo     | nvarchar |
+-------------+----------+
Database: ESApp
Table: newsList
[9 columns]
+--------------+----------+
| Column       | Type     |
+--------------+----------+
| CN           | int      |
| newsFileName | nvarchar |
| newsID       | nvarchar |
| newsPubDate  | datetime |
| newsTitle    | nvarchar |
| RC1          | nvarchar |
| RCId         | nvarchar |
| RN           | int      |
| SheetNo      | nvarchar |
+--------------+----------+
Database: ESApp
Table: HB1自动站每日逐时水气压_明细
[34 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| HB102   | decimal  |
| HB104   | decimal  |
| HB106   | decimal  |
| HB108   | decimal  |
| HB110   | decimal  |
| HB112   | decimal  |
| HB114   | decimal  |
| HB116   | decimal  |
| HB118   | decimal  |
| HB120   | decimal  |
| HB122   | decimal  |
| HB124   | decimal  |
| HB126   | decimal  |
| HB128   | decimal  |
| HB130   | decimal  |
| HB132   | decimal  |
| HB134   | decimal  |
| HB136   | decimal  |
| HB138   | decimal  |
| HB140   | decimal  |
| HB142   | decimal  |
| HB144   | decimal  |
| HB146   | decimal  |
| HB148   | decimal  |
| MEM000  | nvarchar |
| MM0000  | decimal  |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: M11仪器信息表_明细
[11 columns]
+---------------+----------+
| Column        | Type     |
+---------------+----------+
| CN            | int      |
| instrCodeName | nvarchar |
| instrNote     | nvarchar |
| instrPara     | nvarchar |
| instrProd     | nvarchar |
| instrProdDate | nvarchar |
| instrType     | nvarchar |
| RC1           | nvarchar |
| RCId          | nvarchar |
| RN            | int      |
| SheetNo       | nvarchar |
+---------------+----------+
Database: ESApp
Table: M10仪器标定记录表_明细
[12 columns]
+---------------+----------+
| Column        | Type     |
+---------------+----------+
| CaliDate      | nvarchar |
| CaliMeth      | nvarchar |
| CaliOrg       | nvarchar |
| CaliPerson    | nvarchar |
| CN            | int      |
| InstrCodeName | nvarchar |
| Note          | nvarchar |
| RC1           | nvarchar |
| RCId          | nvarchar |
| RN            | int      |
| SheetNo       | nvarchar |
| ValidPeriod   | nvarchar |
+---------------+----------+
Database: ESApp
Table: lanmu_old
[12 columns]
+-----------------+----------+
| Column          | Type     |
+-----------------+----------+
| CN              | int      |
| flag_name       | nvarchar |
| ID_lanmu        | nvarchar |
| lanmu           | nvarchar |
| leixing_zilanmu | nvarchar |
| lianjie         | nvarchar |
| RC1             | nvarchar |
| RCId            | nvarchar |
| RN              | int      |
| SheetNo         | nvarchar |
| zilanmu         | nvarchar |
| zilianjie       | nvarchar |
+-----------------+----------+
Database: ESApp
Table: LC02湖泊水化学要素_明细
[42 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| HH0000  | nvarchar |
| LC0200  | nvarchar |
| LC0202  | int      |
| LC0204  | decimal  |
| LC0206  | decimal  |
| LC0208  | nvarchar |
| LC0210  | decimal  |
| LC0212  | decimal  |
| LC0214  | decimal  |
| LC0216  | decimal  |
| LC0218  | decimal  |
| LC0220  | decimal  |
| LC0222  | decimal  |
| LC0224  | decimal  |
| LC0226  | decimal  |
| LC0228  | decimal  |
| LC0230  | decimal  |
| LC0232  | decimal  |
| LC0234  | decimal  |
| LC0236  | decimal  |
| LC0238  | decimal  |
| LC0240  | decimal  |
| LC0242  | decimal  |
| LC0244  | decimal  |
| LC0246  | decimal  |
| LC0248  | decimal  |
| LC0250  | decimal  |
| LC0252  | nvarchar |
| LC0254  | decimal  |
| LC0256  | decimal  |
| LC0258  | decimal  |
| LC0260  | decimal  |
| LC0262  | decimal  |
| MM0000  | int      |
| Rc1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: down_application
[14 columns]
+---------------+----------+
| Column        | Type     |
+---------------+----------+
| attr          | nvarchar |
| CN            | int      |
| date1         | nvarchar |
| deal          | nvarchar |
| entID         | nvarchar |
| id            | int      |
| length        | nvarchar |
| RC1           | nvarchar |
| RCId          | nvarchar |
| RN            | int      |
| SheetNo       | nvarchar |
| sql1          | nvarchar |
| tablename     | nvarchar |
| userloginName | nvarchar |
+---------------+----------+
Database: ESApp
Table: roleapply用户角色申请表_明细
[7 columns]
+---------------+---------+
| Column        | Type    |
+---------------+---------+
| affiDeptName  | varchar |
| applyTime     | varchar |
| dealState     | varchar |
| dealTime      | varchar |
| deptName      | varchar |
| id            | bigint  |
| userloginName | varchar |
+---------------+---------+
Database: ESApp
Table: RH1自动站每日逐时相对湿度_明细
[34 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RH102   | decimal  |
| RH104   | decimal  |
| RH106   | decimal  |
| RH108   | decimal  |
| RH110   | decimal  |
| RH112   | decimal  |
| RH114   | decimal  |
| RH116   | decimal  |
| RH118   | decimal  |
| RH120   | decimal  |
| RH122   | decimal  |
| RH124   | decimal  |
| RH126   | decimal  |
| RH128   | decimal  |
| RH130   | decimal  |
| RH132   | decimal  |
| RH134   | decimal  |
| RH136   | decimal  |
| RH138   | decimal  |
| RH140   | decimal  |
| RH142   | decimal  |
| RH144   | decimal  |
| RH146   | decimal  |
| RH148   | decimal  |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | decimal  |
+---------+----------+
Database: ESApp
Table: Q1数据质量信息表_明细
[18 columns]
+--------------+----------+
| Column       | Type     |
+--------------+----------+
| AttribName   | nvarchar |
| CN           | int      |
| DimName      | nvarchar |
| DQBeginTm    | nvarchar |
| DQCode       | nvarchar |
| DQEndTm      | nvarchar |
| DQName       | nvarchar |
| DQScopeCode  | nvarchar |
| entName      | nvarchar |
| evalDate     | nvarchar |
| evalMethDesc | nvarchar |
| evalPerson   | nvarchar |
| evalResult   | nvarchar |
| id           | nvarchar |
| RC1          | nvarchar |
| RCId         | nvarchar |
| RN           | int      |
| SheetNo      | nvarchar |
+--------------+----------+
Database: ESApp
Table: 资金来源代码_明细
[8 columns]
+----------+----------+
| Column   | Type     |
+----------+----------+
| CN       | int      |
| FundCode | nvarchar |
| FundDesc | nvarchar |
| FundName | nvarchar |
| RC1      | nvarchar |
| RCId     | nvarchar |
| RN       | int      |
| SheetNo  | nvarchar |
+----------+----------+
Database: ESApp
Table: M1方法基本信息表_明细
[14 columns]
+----------------+----------+
| Column         | Type     |
+----------------+----------+
| CN             | int      |
| methBeginTm    | nvarchar |
| methCode       | nvarchar |
| methDesignDesc | nvarchar |
| methEndTm      | nvarchar |
| methName       | nvarchar |
| methSeq1       | int      |
| methType       | nvarchar |
| RC1            | nvarchar |
| RCId           | nvarchar |
| RN             | int      |
| SampSiteCode   | nvarchar |
| SampSiteName   | nvarchar |
| SheetNo        | nvarchar |
+----------------+----------+
Database: ESApp
Table: Tg02自动站逐日地表温度_明细
[12 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MAX000  | decimal  |
| MEAN00  | decimal  |
| MIN000  | decimal  |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | decimal  |
+---------+----------+
Database: ESApp
Table: RH2自动站逐日相对湿度_明细
[12 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MEAN00  | decimal  |
| MIN000  | decimal  |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| TIME20  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: D42自动站逐日太阳辐射极值及其出现时间_明细
[28 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| D4202   | decimal  |
| D4204   | nvarchar |
| D4206   | decimal  |
| D4208   | nvarchar |
| D4210   | decimal  |
| D4212   | nvarchar |
| D4214   | decimal  |
| D4216   | nvarchar |
| D4218   | decimal  |
| D4220   | nvarchar |
| D4222   | decimal  |
| D4224   | nvarchar |
| D4226   | decimal  |
| D4228   | nvarchar |
| D4230   | decimal  |
| D4232   | nvarchar |
| D4234   | decimal  |
| D4236   | nvarchar |
| DD0000  | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: VertDatumCode_明细
[8 columns]
+--------------+----------+
| Column       | Type     |
+--------------+----------+
| CN           | int      |
| RC1          | nvarchar |
| RCId         | nvarchar |
| RN           | int      |
| SheetNo      | nvarchar |
| VertDatum    | nvarchar |
| VertDatumCd  | int      |
| VertDatumDes | nvarchar |
+--------------+----------+
Database: ESApp
Table: Proj1项目信息表_明细
[14 columns]
+-------------+----------+
| Column      | Type     |
+-------------+----------+
| CN          | int      |
| parentProj  | nvarchar |
| projAbs     | nvarchar |
| projBeginTm | datetime |
| projCode    | nvarchar |
| projEndTm   | datetime |
| projFund    | nvarchar |
| projName    | nvarchar |
| projPersons | nvarchar |
| projPurp    | nvarchar |
| Rc1         | nvarchar |
| RCId        | nvarchar |
| RN          | int      |
| SheetNo     | nvarchar |
+-------------+----------+
Database: ESApp
Table: D43自动站逐月太阳辐射极值及其出现时间_明细
[23 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| D4302   | decimal  |
| D4304   | int      |
| D4306   | nvarchar |
| D4308   | decimal  |
| D4310   | int      |
| D4312   | nvarchar |
| D4314   | decimal  |
| D4316   | int      |
| D4318   | nvarchar |
| D4320   | decimal  |
| D4322   | int      |
| D4324   | nvarchar |
| D4326   | decimal  |
| D4328   | int      |
| D4330   | nvarchar |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | int      |
+---------+----------+
Database: ESApp
Table: TD2自动站逐日露点温度_明细
[12 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MAX000  | decimal  |
| MEAN00  | decimal  |
| MIN000  | decimal  |
| MM0000  | int      |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |
| SSS000  | nvarchar |
| YYYY00  | decimal  |
+---------+----------+
Database: ESApp
Table: noticeList
[9 columns]
+----------------+----------+
| Column         | Type     |
+----------------+----------+
| CN             | int      |
| noticeFileName | nvarchar |
| noticeID       | nvarchar |
| noticePubDate  | datetime |
| noticeTitle    | nvarchar |
| RC1            | nvarchar |
| RCId           | nvarchar |
| RN             | int      |
| SheetNo        | nvarchar |
+----------------+----------+
Database: ESApp
Table: S1观测场基本信息表_明细
[18 columns]
+-----------------+-------------+
| Column          | Type        |
+-----------------+-------------+
|                |
| C               | 0           |
| CN              | int         |
| RC1             | 0x6e0076006 |
| RCId            | nvarchar    |
| site_centerNL   | decimal     |
| siteAfterMana   | nvarchar    |
| siteBeforeMana  | nvarchar    |
| sitebeginTm     | datetime    |
| SiteCode        | nvarchar    |
| siteEcoType     | nvarchar    |
| siteEndTm       | datetime    |
| SiteName        | nvarchar    |
| sitesamSiteConf | nvarchar    |
| siteShape       | nvarchar    |
| siteSize        | decimal     |
| typiAreaName    | nvarchar    |
| x               | 4           |
+-----------------+-------------+
Database: ESApp
Table: R1自动站每日逐时降水_明细
[34 columns]
+---------+----------+
| Column  | Type     |
+---------+----------+
| CN      | int      |
| DD0000  | int      |
| MEM000  | nvarchar |
| MM0000  | int      |
| R102    | decimal  |
| R104    | decimal  |
| R106    | decimal  |
| R108    | decimal  |
| R110    | decimal  |
| R112    | decimal  |
| R114    | decimal  |
| R116    | decimal  |
| R118    | decimal  |
| R120    | decimal  |
| R122    | decimal  |
| R124    | decimal  |
| R126    | decimal  |
| R128    | decimal  |
| R130    | decimal  |
| R132    | decimal  |
| R134    | decimal  |
| R136    | decimal  |
| R138    | decimal  |
| R140    | decimal  |
| R142    | decimal  |
| R144    | decimal  |
| R146    | decimal  |
| R148    | decimal  |
| RC1     | nvarchar |
| RCId    | nvarchar |
| RN      | int      |
| SheetNo | nvarchar |


官方邮箱泄漏，密码可进入搜狐邮箱：

web application technology: JSP
back-end DBMS: Microsoft SQL Server 2005
Database: ESApp
Table: email
[1 entry]
+-----------------+----------+---------------+----+
| name            | password | stmp          | CN |
+-----------------+----------+---------------+----+
| lzlake@sohu.com | 68756834 | mail.sohu.com | NULL |
+-----------------+----------+---------------+----+


搜狐邮箱截图：





漏洞证明：

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：无影响厂商忽略

忽略时间：2015-04-13 16:58

厂商回复：

漏洞Rank：4 (WooYun评价)

最新状态：

暂无