神刀安全网

漏洞标题: 某省卫生厅GetShell可获取数百万个人信息(包括姓名/身份证/地址/电话)

漏洞详情

披露状态:

2016-04-20: 细节已通知厂商并且等待厂商处理中
2016-04-22: 厂商已经确认,细节仅向厂商公开
2016-05-02: 细节向核心白帽子及相关领域专家公开
2016-05-12: 细节向普通白帽子公开
2016-05-22: 细节向实习白帽子公开
2016-06-06: 细节向公众公开

简要描述:

求rank

详细说明:

code 区域

mask 区域
*****.*******

辽宁卫生系统8001端口反序列getshell,本次发现已有后门,查看密码,使用已有shell

code 区域

mask 区域
1.://**.**.**/bea_wls_internal/a.jspx

pwd:

mask 区域
*****zz*****

jdbc:

code 区域
url=jdbc/:oracle/:thin/:@**.**.**.**/:1521/:ireport 
username=wsbirpt
password=wsbirpt

code 区域
WSBIRPT WT4_2013_XXB 12638537
WSBIRPT WT4_1BJB_XXB 10774282
WSBBIRPT WTNB09_Q_CYBR 10498283
WSBBIRPT N12_CYBR 8957642
WSBBIRPT N14_Q_CYBN_POOL 5837741
WSBIRPT WT4_2014 4058332
WSBIRPT A_WT4_XY_2014 4057038
WSBBIRPT WTNB09_H_WORKFORCE 4039717
WSBBIRPT WTNB09_Q_CYBR_POOL 3930855
WSBBIRPT WTNB09_H_WORKFORCE_POOL 3924476
WSBBIRPT N14_CYBN_POOL 3459205
WSBBIRPT WTNB09_CYBR_POOL 2952729
SYS WRM$_SNAPSHOT_DETAILS 1869082
WSBBIRPT WTNB09_CYBR 1825202
WSBBIRPT WTNB09_CYBR_CLEAN 1806703
WSBIRPT WT4_2013_XXB_20130806 1265448
WSBIRPT WT4_JBZY_XXB 1254909
SYS WRI$_OPTSTAT_HISTGRM_HISTORY 1233445
SYS WARNING_SETTINGS$ 1212841
WSBIRPT WT4B_XXB 1145492
WSBBIRPT WTNB09_Q_CYBR_CLEAN 952746
WSBBIRPT N12_CYBR_CLEAN 932834
WSBBIRPT DIM_DW2 908110
WSBBIRPT DIM_DW1 908110
WSBBIRPT DIM_DW 908110
WSBBIRPT N12_CYBR_ZY 808614
WSXXZB WT4B_XXB 685960
WSBBIRPT N12_YBJG 676052
WSBBIRPT WT4_B21 669454
WSBIRPT NWT4B_B0 629675
WSBBIRPT WTNB_CYBR 615273
WSBBIRPT WTNB_CYBR_CLEAN 584470
SYS SOURCE$ 529873
SYS WRI$_ADV_MESSAGE_GROUPS 504504
WSBIRPT NWT4B_B0_090220BAK 463785
WSXXZB IDATA_LOG 399690
WSBIRPT WT2B_XXB 337034
WSBIRPT WT2B_XXB_20151217 330264
WSXXZB BAK1 296191
WSBIRPT WT2B_XXB_20131120 291371
WSBIRPT WT2B_XXB_20130806 286613
WSBIRPT WT2B_XXB_20130812 286613
SYS WRH$_EVENT_HISTOGRAM 284711
WSBIRPT WT2B_AUDIT_RESULTS 263962
WSBIRPT WT2B_AUDIT_RELITEMS 263962
WSBIRPT WT1_9B_APPROVE 263936
SYS WRH$_SYSMETRIC_HISTORY 256780
WSBIRPT WT2B_XXB_20101011 246477
WSBIRPT WJT471B_XXB 241805
WSBIRPT NWT2B_B0 241697
WSBIRPT NWT2B_B0_BAK 241697
WSBIRPT DMV_WT2B_XXB 237684
WSBIRPT NWT2B_B0_1215BAK 237023
WSBIRPT BK2010_WT2B_XXB 236485
SYS COL$ 229167
WSBIRPT N12_WT1_1YB_XXB 218463
WSBBIRPT WT2B 217851
WSBBIRPT WT2B_BAK 217272
WSBBIRPT WT2B_POOL 216697
WSBIRPT N12_WT1_1YB_B0 211096
WSBIRPT N12_WT1_1YB_B1 208057
WSBIRPT WJT471B_XXB_20160126 207821
WSBIRPT WJT471B_XXB1 207821
WSBIRPT N12_WT1_1YB_XXB_20160108 206930
WSBIRPT N12_WT1_1YB_XXB20160125 206178
WSBIRPT N12_WT1_1YB_XXB_20151217 204607
WSBIRPT N12_WT1_1YB_B020160125 199207
WSBIRPT N12_WT1_1YB_B0_20160108 198880
WSBIRPT WJT1_8B_B02 198193
WSBIRPT N12_WT1_1YB_B0_20151217 198193
WSBIRPT WJT1_8B_B01 197814
WSBIRPT N12_WT1_1YB_B1_20160108 195842
WSBIRPT N12_WT1_1YB_B1_20151217 195155
WSXXZB WT2B_XXB 192441
WSBBIRPT N13_CWSS_RL_POOL 186755
WSBBIRPT N13_CWSS_RL 186755
WSXXZB SERVERUSER_PROPERTY 182655
WSBIRPT N12_WT1_1YB_B0_20150628 179234
WSBIRPT WJT1_8B_B0 179011
WSBIRPT WT4_2013_XXB2 178774
WSBBIRPT N12_WTYB 178768
WSBBIRPT N12_YBJG_POOL 171850
WSBIRPT N12_WT1_1YB_XXB20150302 170716
WSBIRPT N12_WT1_9B_B9 167753
WSBIRPT N12_WT1_1YB_XXB20150125 167483
WSBIRPT WT1_4NB_XXB 166402
WSBIRPT WT1_4NB_XXB_20160115 166279
WSBIRPT N12_WT1_1YB_B020150302 164981
WSBIRPT WT1_4NB_B1 163622
WSBIRPT WJT1_3B_B11 163602
WSBIRPT WT1_4NB_B1_20160115 163602
WSBBIRPT N12_CWSS 163496
WSBIRPT N12_WT1_1YB_B020150125 161759
WSBBIRPT WTNB09_MF_POOL 156955
WSBIRPT N12_WT1_9B_B9_20160108 154982
WSBIRPT N12_WT1_9B_B9_20151217 154298
SYS HIST_HEAD$ 152250
SYS HISTGRM$ 152147
WSBIRPT WT1_4NB_B0 151898
WSBBIRPT WTNB_CYBR_POOL 149337
SYS WRH$_SYSSTAT 146792
WSBIRPT WT1_4NB_XXB_20151217 146284
WSBIRPT TEMP_UDI1510541794 145900
WSBIRPT Z_YB18 145343
WSBIRPT WT1_4NB_B1_20151217 143945
WSBIRPT WJT1_3B_B1 143847
WSXXZB SYS_LOG 139178
WSBBIRPT WTNB09_MF 137606
WSBIRPT WT1_4NB_B0_20151217 132225
SYS WRH$_LATCH 130508
WSXXZB IREPORT_LOG 125303
SYS WRI$_OPTSTAT_HISTHEAD_HISTORY 123904
WSBBIRPT N12_SJ_YGJC_POOL 123901
WSXXZB BAK 121956
WSXXZB SECU_RELATE 115413
WSBBIRPT N15_CFFM 108673
WSBIRPT WT1_3B_XXB3 105434
WSBBIRPT NB_DPT20140128 105333
WSBBIRPT NB_DPT20140211 105304
WSBBIRPT NB_DPT20140207 105304
WSBBIRPT NB_DPT20140213 105304
WSBBIRPT NB_DPT20140204 105304
WSBBIRPT NB_DPT20140214 105277
WSBBIRPT NB_DPT20140225 105238
WSBBIRPT NB_DPT20140219 105238
WSBBIRPT NB_DPT20140217 105237
SYS WRH$_SQL_PLAN 103264
WSBIRPT WT4_JBZY_XXB_20130806 97285
WSBIRPT N12_WT1_1YB_XXB_ZG1226 95190
WSBIRPT WT1_N12_WT1_1YB_B0_ZG1226 93809
WSBIRPT N12_WT1_1YB_B1_ZG1226 93797
WSBBIRPT N15_CFFM_POOL 91939
WSBIRPT WT1_3NB_XXB 88487
WSBIRPT WT1_10B_APPROVE 88301
WSBIRPT WT1_3NB_B1 87092
WSBIRPT IRPT_DEPARTMENTS 86144
WSBIRPT IRPT_DEPARTMENTS20160218 85659
WSBIRPT WT1_4B_APPROVE 85468
SYS WRH$_PARAMETER 84016
WSBIRPT WT1_4NB_XXB_ZG1226 83846
WSBIRPT WT1_3NB_B0 83710
WSBIRPT WT1_4NB_B1_ZG1226 82854
WSBBIRPT WTNB09_CWSS 82671
SYS ARGUMENT$ 82573
WSBIRPT IRPT_DEPARTMENTS20150127 81004
WSXXZB SECU_ROLE 78502
WSBIRPT N11_WT1_1YB_XXB 77721
WSBIRPT WT1_3NB_XXB_20151217 77244
WSBIRPT N11_WT1_1YB_B0 77098
WSBIRPT N11_WT1_1YB_B1 77085
WSBIRPT WSSJBF_IRPT_DEPARTMENTS 76612
WSBIRPT WJT1_4B_B1 76062
WSBIRPT WT1_3NB_B1_20151217 76062
WSXXZB WT1_1NB_AUDIT_RELITEMS 75007
WSXXZB WT1_1NB_AUDIT_RESULTS 75007
WSBIRPT WT1_3NB_B0_20151217 72854
WSBIRPT WT1_4NB_B0_ZG1226 71145
WSBBIRPT NB_DPT 70692
WSBBIRPT NB_DPT20160223 70691
WSBBIRPT NB_DPT20160222 70691
WSBBIRPT NB_DPT20160201 70688
WSBBIRPT NB_DPT20160125 70688
WSBBIRPT NB_DPT20160128 70688
WSBBIRPT NB_DPT20160218 70685
WSBBIRPT NB_DPT20160219 70679
WSBBIRPT NB_DPT20140124 69690
WSBIRPT IRPT_DEPARTMENTS_WK20130705 67725
SYS AUD$ 66380
WSBIRPT IRPT_DEPARTMENTS_0130 65851
SYS SETTINGS$ 63776
WSBBIRPT N12_1NB_B15 62699
WSBBIRPT N12_1NB_B14 62699
WSBBIRPT N12_1NB_B13 62699
WSBBIRPT N12_1NB_B12 62699
WSBBIRPT N12_1NB_B11 62699
WSBBIRPT N12_1NB_B10 62699
WSBBIRPT N12_1NB_B09 62699
WSBBIRPT N12_1NB_B08 62699
WSBBIRPT N12_1NB_B07 62699
WSBBIRPT N12_1NB_B06 62699
WSBBIRPT N12_1NB_B05 62699
WSBBIRPT N12_1NB_B04 62699
WSBBIRPT N12_1NB_B03 62699
WSBBIRPT N12_1NB_B02 62699
WSBBIRPT N12_1NB_B01 62699
WSBIRPT WT1_3B_AUDIT_RELITEMS 62566
WSBIRPT WT1_3B_AUDIT_RESULTS 62566
WSBBIRPT WTNB09_B13 61436
WSBBIRPT WTNB09_B12 61436
WSBBIRPT WTNB09_B11 61436
WSBBIRPT WTNB09_B10 61436
WSBBIRPT WTNB09_B14 61436
WSBBIRPT WTNB09_DP_POOL 61436
WSBBIRPT WTNB09_B09 61436
WSBBIRPT WTNB09_B08 61436
WSBBIRPT WTNB09_B07 61436
WSBBIRPT WTNB09_B06 61436
WSBBIRPT WTNB09_B05 61436
WSBBIRPT WTNB09_B04 61436
WSBBIRPT WTNB09_B03 61436
WSBBIRPT WTNB09_B02 61436
WSBBIRPT N12_1NB_B10_FK 61269
SYS DEPENDENCY$ 59091
WSBBIRPT WTNB09_B01 57830
WSBIRPT IRPT4_ROLE_RELATION 57586
SYS WRH$_LATCH_MISSES_SUMMARY 57397
WSBIRPT WT1_3B_APPROVE 55623
WSBIRPT WT1_3NB_XXB_20131120 54070
WSBIRPT WT1_3NB_B1_20131120 53303
WSBBIRPT EBI_TSK31_HIS_WTNB 51371
SYS WRI$_ADV_PARAMETERS 51049
WSBIRPT WT2BCWSS_XXB 50307
WSBIRPT WT1_1JB_AUDIT_RELITEMS 50281
WSBIRPT WT1_1JB_AUDIT_RESULTS 50281
WSBIRPT WT1_3NB_B0_20131120 50096
WSBIRPT WT2BCWSS_XXB_20151224 49951
WSBIRPT WT2BCWSS_XXB_20151217 49947
WSBIRPT WJT2CWSS_XXB 49947
WSBIRPT N12_WT1_9B_B9_ZG1226 49409
WSXXZB SYS_DICT_XZJD 47356
WSBBIRPT DIM_WT1_1NB_XZJDDM 47356
WSBBIRPT DIM_WT1_1NB_XZJDDM2 47356
WSBIRPT DIM_XZJDDM 47198
WSBBIRPT N12_YGJC_POOL 45716
WSBIRPT EBI_TSK31_RES_WT2BZS 44270
WSBIRPT WT1_3NB_XXB_ZG1226 43847
WSBIRPT WT1_3NB_B1_ZG1226 43444
WSXXZB WT1_4NB_XXB 42761
WSXXZB WT1_4NB_B1 42760
WSXXZB WT1_4NB_B3 42685
WSXXZB WT1_4NB_B2 42669
WSXXZB WT1_4NB_B4 42626
WSBIRPT DMV_NWT1_4NB_B0 42235
WSBIRPT NWT1_4NB_B0 42235
WSBIRPT NWT1_4NB_B0_BAK_2009111 42235
SYS OBJ$ 42173
WSBBIRPT WTNB1_4_BAK 41988
WSBIRPT WT1_4NB_XXB_20100303 41386
WSBBIRPT N11_WTYB 41379
SYS WRH$_ACTIVE_SESSION_HISTORY 41275
WSBIRPT WT1_4NB_B1_20100303 41106
WSXXZB WT1_4NB_B5 40782
WSBIRPT WT2B_APPROVE 40478
WSBIRPT WT1_2YB_XXB 40126
WSBIRPT WT1_3NB_B0_ZG1226 40082
WSBIRPT WT2BCWSS_XXB_20131120 39547
WSXXZB SECU_USER 39363
WSBIRPT WT2BZSL_XXB 39005
SYS CCOL$ 38575
WSBIRPT WT1_2YB_B0 38317
WSBIRPT WT1_2YB_B1 38304
WSBBIRPT WTYB09_XXB 38303
WSBIRPT WT2BZSL_XXB_20151217 38164
WSBIRPT NWT1_4NB_B0_090220BAK 37960
WSBIRPT IRPT_DEPARTMENTS_20101201 37520
WSBIRPT WT1_4NB_B0_20100303 37443
WSBIRPT IRPT_DEPARTMENTS_BAK_2010SJ 37402
WSBIRPT IRPT_DEPARTMENTS_TMP_20100416 37103
WSBIRPT IRPT_DEPARTMENTS_20100303 37059
WSXXZB IRPT_DEPARTMENTS 36566
WSXXZB UL_WSZB 36566
WSXXZB SECU_DEPARTMENT 36566
SYS CON$ 36540
SYS CDEF$ 36539
WSXXZB IRPT_USERS 36528
SYS ACCESS$ 36215
WSBBIRPT WT1_1NB_B6 36166
WSBBIRPT WT1_1NB_B4 36166
WSBBIRPT WT1_1NB_B1 36166
WSBBIRPT WT1_1NB_B2 36166
WSBBIRPT WT1_1NB_B10 36066
WSBIRPT WT2BZSL_XXB_20150109 35893
WSBBIRPT NB_DPT20130514 35778
WSBBIRPT NB_DPT20130626 35777
WSBBIRPT NB_DPT20130528 35777
WSBBIRPT NB_DPT20160121 35445
WSBIRPT WT3B_XXB 35297
WSBIRPT IRPT_WSB_PDYCODE 34464
WSBIRPT TEMP_UDI231902472 34281
SYS WRH$_SYSTEM_EVENT 34136
SYS WRH$_SYSMETRIC_SUMMARY 33812
WSBIRPT WT3B_XXB_20151217 33584
WSBIRPT N11_WT1_1YB_B2 33002
WSBIRPT WT2BZSL_XXB_20131120 32482
WSBIRPT WJT2BZSL_XXB 32482
WSBIRPT TEMP_UDI1630134449 32477
WSBIRPT WT2BZSL_XXB_20130806 31443
WSBIRPT WT2BZSL_XXB_20130812 31443
WSBIRPT WT2BZSL_XXB2 31259
WSBIRPT WT2BZSL_XXB1 30928
WSBBIRPT WTNB1_BAK 29607
WSBBIRPT NB_DPT_POOL20140128 29605
SYS SCHEDULER$_EVENT_LOG 29593
WSBBIRPT WTNB2_BAK 29590
WSBBIRPT WTNB4_BAK 29589
WSBBIRPT WTNB6_BAK 29577
WSBBIRPT NB_DPT_POOL20140219 29576
WSBBIRPT NB_DPT_POOL20140204 29576
WSBBIRPT NB_DPT_POOL20140207 29576
WSBBIRPT NB_DPT_POOL20140213 29576
WSBBIRPT NB_DPT_POOL20140225 29576
WSBBIRPT NB_DPT_POOL20140211 29576
WSBBIRPT NB_DPT_POOL20140214 29575
WSBBIRPT NB_DPT_POOL20140217 29575
WSBBIRPT WTNB1_TEMP 29246
WSBBIRPT WTNB2_TEMP 29230
WSBBIRPT WTNB4_TEMP 29230
WSBBIRPT WTNB6_TEMP 29217
WSBBIRPT WTNB8_BAK 28790
WSBBIRPT WTNB8_TEMP 28790

漏洞标题:  某省卫生厅GetShell可获取数百万个人信息(包括姓名/身份证/地址/电话)

漏洞证明:

</code>

code 区域
WSBIRPT WT4_2013_XXB 12638537
WSBIRPT WT4_1BJB_XXB 10774282
WSBBIRPT WTNB09_Q_CYBR 10498283
WSBBIRPT N12_CYBR 8957642
WSBBIRPT N14_Q_CYBN_POOL 5837741
WSBIRPT WT4_2014 4058332
WSBIRPT A_WT4_XY_2014 4057038
WSBBIRPT WTNB09_H_WORKFORCE 4039717
WSBBIRPT WTNB09_Q_CYBR_POOL 3930855
WSBBIRPT WTNB09_H_WORKFORCE_POOL 3924476
WSBBIRPT N14_CYBN_POOL 3459205
WSBBIRPT WTNB09_CYBR_POOL 2952729
SYS WRM$_SNAPSHOT_DETAILS 1869082
WSBBIRPT WTNB09_CYBR 1825202
WSBBIRPT WTNB09_CYBR_CLEAN 1806703
WSBIRPT WT4_2013_XXB_20130806 1265448
WSBIRPT WT4_JBZY_XXB 1254909
SYS WRI$_OPTSTAT_HISTGRM_HISTORY 1233445
SYS WARNING_SETTINGS$ 1212841
WSBIRPT WT4B_XXB 1145492
WSBBIRPT WTNB09_Q_CYBR_CLEAN 952746
WSBBIRPT N12_CYBR_CLEAN 932834
WSBBIRPT DIM_DW2 908110
WSBBIRPT DIM_DW1 908110
WSBBIRPT DIM_DW 908110
WSBBIRPT N12_CYBR_ZY 808614
WSXXZB WT4B_XXB 685960
WSBBIRPT N12_YBJG 676052
WSBBIRPT WT4_B21 669454
WSBIRPT NWT4B_B0 629675
WSBBIRPT WTNB_CYBR 615273
WSBBIRPT WTNB_CYBR_CLEAN 584470
SYS SOURCE$ 529873
SYS WRI$_ADV_MESSAGE_GROUPS 504504
WSBIRPT NWT4B_B0_090220BAK 463785
WSXXZB IDATA_LOG 399690
WSBIRPT WT2B_XXB 337034
WSBIRPT WT2B_XXB_20151217 330264
WSXXZB BAK1 296191
WSBIRPT WT2B_XXB_20131120 291371
WSBIRPT WT2B_XXB_20130806 286613
WSBIRPT WT2B_XXB_20130812 286613
SYS WRH$_EVENT_HISTOGRAM 284711
WSBIRPT WT2B_AUDIT_RESULTS 263962
WSBIRPT WT2B_AUDIT_RELITEMS 263962
WSBIRPT WT1_9B_APPROVE 263936
SYS WRH$_SYSMETRIC_HISTORY 256780
WSBIRPT WT2B_XXB_20101011 246477
WSBIRPT WJT471B_XXB 241805
WSBIRPT NWT2B_B0 241697
WSBIRPT NWT2B_B0_BAK 241697
WSBIRPT DMV_WT2B_XXB 237684
WSBIRPT NWT2B_B0_1215BAK 237023
WSBIRPT BK2010_WT2B_XXB 236485
SYS COL$ 229167
WSBIRPT N12_WT1_1YB_XXB 218463
WSBBIRPT WT2B 217851
WSBBIRPT WT2B_BAK 217272
WSBBIRPT WT2B_POOL 216697
WSBIRPT N12_WT1_1YB_B0 211096
WSBIRPT N12_WT1_1YB_B1 208057
WSBIRPT WJT471B_XXB_20160126 207821
WSBIRPT WJT471B_XXB1 207821
WSBIRPT N12_WT1_1YB_XXB_20160108 206930
WSBIRPT N12_WT1_1YB_XXB20160125 206178
WSBIRPT N12_WT1_1YB_XXB_20151217 204607
WSBIRPT N12_WT1_1YB_B020160125 199207
WSBIRPT N12_WT1_1YB_B0_20160108 198880
WSBIRPT WJT1_8B_B02 198193
WSBIRPT N12_WT1_1YB_B0_20151217 198193
WSBIRPT WJT1_8B_B01 197814
WSBIRPT N12_WT1_1YB_B1_20160108 195842
WSBIRPT N12_WT1_1YB_B1_20151217 195155
WSXXZB WT2B_XXB 192441
WSBBIRPT N13_CWSS_RL_POOL 186755
WSBBIRPT N13_CWSS_RL 186755
WSXXZB SERVERUSER_PROPERTY 182655
WSBIRPT N12_WT1_1YB_B0_20150628 179234
WSBIRPT WJT1_8B_B0 179011
WSBIRPT WT4_2013_XXB2 178774
WSBBIRPT N12_WTYB 178768
WSBBIRPT N12_YBJG_POOL 171850
WSBIRPT N12_WT1_1YB_XXB20150302 170716
WSBIRPT N12_WT1_9B_B9 167753
WSBIRPT N12_WT1_1YB_XXB20150125 167483
WSBIRPT WT1_4NB_XXB 166402
WSBIRPT WT1_4NB_XXB_20160115 166279
WSBIRPT N12_WT1_1YB_B020150302 164981
WSBIRPT WT1_4NB_B1 163622
WSBIRPT WJT1_3B_B11 163602
WSBIRPT WT1_4NB_B1_20160115 163602
WSBBIRPT N12_CWSS 163496
WSBIRPT N12_WT1_1YB_B020150125 161759
WSBBIRPT WTNB09_MF_POOL 156955
WSBIRPT N12_WT1_9B_B9_20160108 154982
WSBIRPT N12_WT1_9B_B9_20151217 154298
SYS HIST_HEAD$ 152250
SYS HISTGRM$ 152147
WSBIRPT WT1_4NB_B0 151898
WSBBIRPT WTNB_CYBR_POOL 149337
SYS WRH$_SYSSTAT 146792
WSBIRPT WT1_4NB_XXB_20151217 146284
WSBIRPT TEMP_UDI1510541794 145900
WSBIRPT Z_YB18 145343
WSBIRPT WT1_4NB_B1_20151217 143945
WSBIRPT WJT1_3B_B1 143847
WSXXZB SYS_LOG 139178
WSBBIRPT WTNB09_MF 137606
WSBIRPT WT1_4NB_B0_20151217 132225
SYS WRH$_LATCH 130508
WSXXZB IREPORT_LOG 125303
SYS WRI$_OPTSTAT_HISTHEAD_HISTORY 123904
WSBBIRPT N12_SJ_YGJC_POOL 123901
WSXXZB BAK 121956
WSXXZB SECU_RELATE 115413
WSBBIRPT N15_CFFM 108673
WSBIRPT WT1_3B_XXB3 105434
WSBBIRPT NB_DPT20140128 105333
WSBBIRPT NB_DPT20140211 105304
WSBBIRPT NB_DPT20140207 105304
WSBBIRPT NB_DPT20140213 105304
WSBBIRPT NB_DPT20140204 105304
WSBBIRPT NB_DPT20140214 105277
WSBBIRPT NB_DPT20140225 105238
WSBBIRPT NB_DPT20140219 105238
WSBBIRPT NB_DPT20140217 105237
SYS WRH$_SQL_PLAN 103264
WSBIRPT WT4_JBZY_XXB_20130806 97285
WSBIRPT N12_WT1_1YB_XXB_ZG1226 95190
WSBIRPT WT1_N12_WT1_1YB_B0_ZG1226 93809
WSBIRPT N12_WT1_1YB_B1_ZG1226 93797
WSBBIRPT N15_CFFM_POOL 91939
WSBIRPT WT1_3NB_XXB 88487
WSBIRPT WT1_10B_APPROVE 88301
WSBIRPT WT1_3NB_B1 87092
WSBIRPT IRPT_DEPARTMENTS 86144
WSBIRPT IRPT_DEPARTMENTS20160218 85659
WSBIRPT WT1_4B_APPROVE 85468
SYS WRH$_PARAMETER 84016
WSBIRPT WT1_4NB_XXB_ZG1226 83846
WSBIRPT WT1_3NB_B0 83710
WSBIRPT WT1_4NB_B1_ZG1226 82854
WSBBIRPT WTNB09_CWSS 82671
SYS ARGUMENT$ 82573
WSBIRPT IRPT_DEPARTMENTS20150127 81004
WSXXZB SECU_ROLE 78502
WSBIRPT N11_WT1_1YB_XXB 77721
WSBIRPT WT1_3NB_XXB_20151217 77244
WSBIRPT N11_WT1_1YB_B0 77098
WSBIRPT N11_WT1_1YB_B1 77085
WSBIRPT WSSJBF_IRPT_DEPARTMENTS 76612
WSBIRPT WJT1_4B_B1 76062
WSBIRPT WT1_3NB_B1_20151217 76062
WSXXZB WT1_1NB_AUDIT_RELITEMS 75007
WSXXZB WT1_1NB_AUDIT_RESULTS 75007
WSBIRPT WT1_3NB_B0_20151217 72854
WSBIRPT WT1_4NB_B0_ZG1226 71145
WSBBIRPT NB_DPT 70692
WSBBIRPT NB_DPT20160223 70691
WSBBIRPT NB_DPT20160222 70691
WSBBIRPT NB_DPT20160201 70688
WSBBIRPT NB_DPT20160125 70688
WSBBIRPT NB_DPT20160128 70688
WSBBIRPT NB_DPT20160218 70685
WSBBIRPT NB_DPT20160219 70679
WSBBIRPT NB_DPT20140124 69690
WSBIRPT IRPT_DEPARTMENTS_WK20130705 67725
SYS AUD$ 66380
WSBIRPT IRPT_DEPARTMENTS_0130 65851
SYS SETTINGS$ 63776
WSBBIRPT N12_1NB_B15 62699
WSBBIRPT N12_1NB_B14 62699
WSBBIRPT N12_1NB_B13 62699
WSBBIRPT N12_1NB_B12 62699
WSBBIRPT N12_1NB_B11 62699
WSBBIRPT N12_1NB_B10 62699
WSBBIRPT N12_1NB_B09 62699
WSBBIRPT N12_1NB_B08 62699
WSBBIRPT N12_1NB_B07 62699
WSBBIRPT N12_1NB_B06 62699
WSBBIRPT N12_1NB_B05 62699
WSBBIRPT N12_1NB_B04 62699
WSBBIRPT N12_1NB_B03 62699
WSBBIRPT N12_1NB_B02 62699
WSBBIRPT N12_1NB_B01 62699
WSBIRPT WT1_3B_AUDIT_RELITEMS 62566
WSBIRPT WT1_3B_AUDIT_RESULTS 62566
WSBBIRPT WTNB09_B13 61436
WSBBIRPT WTNB09_B12 61436
WSBBIRPT WTNB09_B11 61436
WSBBIRPT WTNB09_B10 61436
WSBBIRPT WTNB09_B14 61436
WSBBIRPT WTNB09_DP_POOL 61436
WSBBIRPT WTNB09_B09 61436
WSBBIRPT WTNB09_B08 61436
WSBBIRPT WTNB09_B07 61436
WSBBIRPT WTNB09_B06 61436
WSBBIRPT WTNB09_B05 61436
WSBBIRPT WTNB09_B04 61436
WSBBIRPT WTNB09_B03 61436
WSBBIRPT WTNB09_B02 61436
WSBBIRPT N12_1NB_B10_FK 61269
SYS DEPENDENCY$ 59091
WSBBIRPT WTNB09_B01 57830
WSBIRPT IRPT4_ROLE_RELATION 57586
SYS WRH$_LATCH_MISSES_SUMMARY 57397
WSBIRPT WT1_3B_APPROVE 55623
WSBIRPT WT1_3NB_XXB_20131120 54070
WSBIRPT WT1_3NB_B1_20131120 53303
WSBBIRPT EBI_TSK31_HIS_WTNB 51371
SYS WRI$_ADV_PARAMETERS 51049
WSBIRPT WT2BCWSS_XXB 50307
WSBIRPT WT1_1JB_AUDIT_RELITEMS 50281
WSBIRPT WT1_1JB_AUDIT_RESULTS 50281
WSBIRPT WT1_3NB_B0_20131120 50096
WSBIRPT WT2BCWSS_XXB_20151224 49951
WSBIRPT WT2BCWSS_XXB_20151217 49947
WSBIRPT WJT2CWSS_XXB 49947
WSBIRPT N12_WT1_9B_B9_ZG1226 49409
WSXXZB SYS_DICT_XZJD 47356
WSBBIRPT DIM_WT1_1NB_XZJDDM 47356
WSBBIRPT DIM_WT1_1NB_XZJDDM2 47356
WSBIRPT DIM_XZJDDM 47198
WSBBIRPT N12_YGJC_POOL 45716
WSBIRPT EBI_TSK31_RES_WT2BZS 44270
WSBIRPT WT1_3NB_XXB_ZG1226 43847
WSBIRPT WT1_3NB_B1_ZG1226 43444
WSXXZB WT1_4NB_XXB 42761
WSXXZB WT1_4NB_B1 42760
WSXXZB WT1_4NB_B3 42685
WSXXZB WT1_4NB_B2 42669
WSXXZB WT1_4NB_B4 42626
WSBIRPT DMV_NWT1_4NB_B0 42235
WSBIRPT NWT1_4NB_B0 42235
WSBIRPT NWT1_4NB_B0_BAK_2009111 42235
SYS OBJ$ 42173
WSBBIRPT WTNB1_4_BAK 41988
WSBIRPT WT1_4NB_XXB_20100303 41386
WSBBIRPT N11_WTYB 41379
SYS WRH$_ACTIVE_SESSION_HISTORY 41275
WSBIRPT WT1_4NB_B1_20100303 41106
WSXXZB WT1_4NB_B5 40782
WSBIRPT WT2B_APPROVE 40478
WSBIRPT WT1_2YB_XXB 40126
WSBIRPT WT1_3NB_B0_ZG1226 40082
WSBIRPT WT2BCWSS_XXB_20131120 39547
WSXXZB SECU_USER 39363
WSBIRPT WT2BZSL_XXB 39005
SYS CCOL$ 38575
WSBIRPT WT1_2YB_B0 38317
WSBIRPT WT1_2YB_B1 38304
WSBBIRPT WTYB09_XXB 38303
WSBIRPT WT2BZSL_XXB_20151217 38164
WSBIRPT NWT1_4NB_B0_090220BAK 37960
WSBIRPT IRPT_DEPARTMENTS_20101201 37520
WSBIRPT WT1_4NB_B0_20100303 37443
WSBIRPT IRPT_DEPARTMENTS_BAK_2010SJ 37402
WSBIRPT IRPT_DEPARTMENTS_TMP_20100416 37103
WSBIRPT IRPT_DEPARTMENTS_20100303 37059
WSXXZB IRPT_DEPARTMENTS 36566
WSXXZB UL_WSZB 36566
WSXXZB SECU_DEPARTMENT 36566
SYS CON$ 36540
SYS CDEF$ 36539
WSXXZB IRPT_USERS 36528
SYS ACCESS$ 36215
WSBBIRPT WT1_1NB_B6 36166
WSBBIRPT WT1_1NB_B4 36166
WSBBIRPT WT1_1NB_B1 36166
WSBBIRPT WT1_1NB_B2 36166
WSBBIRPT WT1_1NB_B10 36066
WSBIRPT WT2BZSL_XXB_20150109 35893
WSBBIRPT NB_DPT20130514 35778
WSBBIRPT NB_DPT20130626 35777
WSBBIRPT NB_DPT20130528 35777
WSBBIRPT NB_DPT20160121 35445
WSBIRPT WT3B_XXB 35297
WSBIRPT IRPT_WSB_PDYCODE 34464
WSBIRPT TEMP_UDI231902472 34281
SYS WRH$_SYSTEM_EVENT 34136
SYS WRH$_SYSMETRIC_SUMMARY 33812
WSBIRPT WT3B_XXB_20151217 33584
WSBIRPT N11_WT1_1YB_B2 33002
WSBIRPT WT2BZSL_XXB_20131120 32482
WSBIRPT WJT2BZSL_XXB 32482
WSBIRPT TEMP_UDI1630134449 32477
WSBIRPT WT2BZSL_XXB_20130806 31443
WSBIRPT WT2BZSL_XXB_20130812 31443
WSBIRPT WT2BZSL_XXB2 31259
WSBIRPT WT2BZSL_XXB1 30928
WSBBIRPT WTNB1_BAK 29607
WSBBIRPT NB_DPT_POOL20140128 29605
SYS SCHEDULER$_EVENT_LOG 29593
WSBBIRPT WTNB2_BAK 29590
WSBBIRPT WTNB4_BAK 29589
WSBBIRPT WTNB6_BAK 29577
WSBBIRPT NB_DPT_POOL20140219 29576
WSBBIRPT NB_DPT_POOL20140204 29576
WSBBIRPT NB_DPT_POOL20140207 29576
WSBBIRPT NB_DPT_POOL20140213 29576
WSBBIRPT NB_DPT_POOL20140225 29576
WSBBIRPT NB_DPT_POOL20140211 29576
WSBBIRPT NB_DPT_POOL20140214 29575
WSBBIRPT NB_DPT_POOL20140217 29575
WSBBIRPT WTNB1_TEMP 29246
WSBBIRPT WTNB2_TEMP 29230
WSBBIRPT WTNB4_TEMP 29230
WSBBIRPT WTNB6_TEMP 29217
WSBBIRPT WTNB8_BAK 28790
WSBBIRPT WTNB8_TEMP 28790

漏洞标题:  某省卫生厅GetShell可获取数百万个人信息(包括姓名/身份证/地址/电话)

修复方案:

更新补丁

版权声明:转载请注明来源 路人甲@乌云

转载本站任何文章请注明:转载至神刀安全网,谢谢神刀安全网 » 漏洞标题: 某省卫生厅GetShell可获取数百万个人信息(包括姓名/身份证/地址/电话)

分享到:更多 ()

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址