漏洞概要 关注数(24) 关注此漏洞
>
漏洞详情
披露状态：
2014-03-14： 积极联系厂商并且等待厂商认领中，细节不对外公开
2014-04-28： 厂商已经主动忽略漏洞，细节向公众公开
简要描述：
很多doc，xls文件包含敏感信息可获取姓名","级别","准考证号","行测","申论","身份证号","工作单位","报考单位代码","报考职位代码
详细说明：
大学生信息-----可获取姓名","级别","准考证号","行测","申论","身份证号","工作单位","报考单位代码","报考职位代码
http://www.hozoo.com.cn/Uploadpic/200962173257604.xls
http://www.hozoo.com.cn/Uploadpic/2009521131459878.xls
http://www.hozoo.com.cn/Uploadpic/2009615135449845.xls
http://www.hozoo.com.cn/Uploadpic/2009615132934817.xls
小学、初中生信息
http://www.hozoo.com.cn/Uploadpic/20098315156729.xls
http://www.hozoo.com.cn/Uploadpic/200987153133341.xls
还有其他敏感信息被泄露
http://www.hozoo.com.cn/UploadPic/201003/20100317105435835.doc
漏洞证明：
大学生信息-----可获取姓名","级别","准考证号","行测","申论","身份证号","工作单位","报考单位代码","报考职位代码
http://www.hozoo.com.cn/Uploadpic/200962173257604.xls
http://www.hozoo.com.cn/Uploadpic/2009521131459878.xls
http://www.hozoo.com.cn/Uploadpic/2009615135449845.xls
http://www.hozoo.com.cn/Uploadpic/2009615132934817.xls
小学、初中生信息
http://www.hozoo.com.cn/Uploadpic/20098315156729.xls
http://www.hozoo.com.cn/Uploadpic/200987153133341.xls
还有其他敏感信息被泄露
http://www.hozoo.com.cn/UploadPic/201003/20100317105435835.doc
修复方案：
你懂得
版权声明：转载请注明来源 3yst1m@乌云
>
漏洞回应
厂商回应：
未能联系到厂商或者厂商积极拒绝