WooYun.org

#SQL（2处）
http://**.**.**.**/page.php?pkey=9 参数pkey可控
http://**.**.**.**/event_result.php?event_pkey=17 参数event_pkey可控
#SQL（2处）
http://**.**.**.**/page.php?pkey=9 参数pkey可控
http://**.**.**.**/event_result.php?event_pkey=17 参数event_pkey可控
泄露3万+用户信息！
附数据量：
Database: umagazine_v3
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| tbl_gift_result | 894445 |
| tbl_member_forum | 35859 |
| tbl_member | 35855 |
| tbl_member_forum_20080709 | 27195 |
| tbl_member_20080709 | 27193 |
| tbl_contents_book_pages | 26265 |
| tbl_member_20071026 | 24796 |
| tbl_event_result | 17181 |
| tbl_contents_book_pages_bak2 | 8083 |
| tbl_contents_book_desc_photo | 5067 |
| tbl_contents_book_pages_bak3 | 4755 |
| tbl_cms_photo | 1848 |
| tbl_contents_book_desc_photo_bak2 | 1652 |
| tbl_contents_book_desc_photo_bak3 | 1578 |
| tbl_contents_book | 1479 |
| tbl_gift_option | 1176 |
| tbl_gift | 776 |
| tbl_wallpaper | 524 |
| tbl_contents_book_bak2 | 484 |
| tbl_contents_book_bak3 | 484 |
| tbl_photo_sharing | 484 |
| tbl_home | 435 |
| tbl_banner1_item | 330 |
| tbl_contents_book_pages_bak | 288 |
| tbl_event_option | 285 |
| tbl_event | 237 |
| tbl_cms_doc | 222 |
| tbl_story | 145 |
| tbl_forum_topic | 124 |
| tbl_tips | 90 |
| tbl_banner3_item | 85 |
| tbl_banner4_item | 78 |
| tbl_photo_sharing_country | 76 |
| tbl_contents_book_desc_photo_bak | 73 |
| tbl_forum_reply | 70 |
| tbl_event_question | 68 |
| tbl_video_item | 62 |
| tbl_page_content | 61 |
| tbl_story_country | 61 |
| tbl_banner2_item | 58 |
| tbl_wallpaper_country | 55 |
| tbl_member_bookmark | 53 |
| tbl_member_bak | 43 |
| tbl_left_menu | 37 |
| tbl_photo_poll_photo | 36 |
| tbl_video | 34 |
| tbl_forum_user_upload_photo | 24 |
| tbl_page | 24 |
| tbl_contents_section | 18 |
| tbl_video_country | 16 |
| tbl_vote_photo | 15 |
| tbl_experts | 13 |
| tbl_photo_album_photo | 13 |
| tbl_photo_poll_photo_old | 13 |
| tbl_doclist_item | 11 |
| tbl_eventphoto | 10 |
| tbl_member_old | 9 |
| tbl_forum | 8 |
| tbl_photo_sharing_country_group | 8 |
| tbl_qna | 8 |
| tbl_story_country_group | 8 |
| tbl_video_country_group | 8 |
| tbl_wallpaper_country_group | 8 |
| tbl_gameresult | 7 |
| tbl_vote | 7 |
| tbl_forum_group | 6 |
| tbl_vote_photo_old | 5 |
| tbl_ad | 4 |
| tbl_badwords_bak | 4 |
| tbl_photo | 4 |
| tbl_poll | 4 |
| tbl_test | 4 |
| tbl_badwords | 3 |
| tbl_doclist | 3 |
| tbl_photo_album_photo_cat | 3 |
| tbl_photo_poll | 3 |
| tbl_photo_rte | 3 |
| tbl_video_album_video | 3 |
| tbl_video_album_video_cat | 3 |
| tbl_vote_ite | 3 |
| tbl_eventalbum | 2 |
| tbl_photo_poll_old | 2 |
| tbl_vote_topic | 2 |
| tbl_admin | 1 |
| tbl_banner1 | 1 |
| tbl_banner2 | 1 |
| tbl_banner3 | 1 |
| tbl_banner4 | 1 |
| tbl_banner5 | 1 |
| tbl_contact | 1 |
| tbl_content | 1 |
| tbl_eventcontent | 1 |
| tbl_forum_setting | 1 |
| tbl_game | 1 |
| tbl_link | 1 |
| tbl_photo_sharing_index | 1 |
| tbl_photo_sharing_setup | 1 |
| tbl_pollingcontent | 1 |
| tbl_story_setup | 1 |
| tbl_tipscontent | 1 |
| tbl_uclub_promote | 1 |
| tbl_vote_main | 1 |
| tbl_vote_option | 1 |
| tbl_wallpaper_setup | 1 |
+---------------------------------------+---------+
Database: information_schema
+---------------------------------------+---------+
| Table | Entries |
+---------------------------------------+---------+
| COLUMNS | 1751 |
| GLOBAL_STATUS | 291 |
| SESSION_STATUS | 291 |
| GLOBAL_VARIABLES | 277 |
| SESSION_VARIABLES | 277 |
| PARTITIONS | 135 |
| TABLES | 135 |
| COLLATION_CHARACTER_SET_APPLICABILITY | 130 |
| COLLATIONS | 129 |
| STATISTICS | 120 |
| KEY_COLUMN_USAGE | 106 |
| TABLE_CONSTRAINTS | 106 |
| CHARACTER_SETS | 36 |
| SCHEMA_PRIVILEGES | 18 |
| PLUGINS | 7 |
| ENGINES | 5 |
| SCHEMATA | 3 |
| PROCESSLIST | 1 |
| USER_PRIVILEGES | 1 |
+---------------------------------------+---------+