A vulnerability in Taikang Life Insurance affects users' mobile phone names (direct SQL transfer)

A vulnerability in Taikang Life Insurance affects users' mobile phone names (direct SQL transfer)

Taikang Life Insurance Co., Ltd. was founded in August 22, 1996 and is headquartered in Beijing. After 19 years of steady and innovative development, it has become a national large-scale insurance company with life insurance as its core and a whole industrial chain such as enterprise annuities, asset management, elder care community and health insurance, for 11 consecutive years, he was honored as "Top 500 Chinese enterprises ". Taikang Life Insurance, through comprehensive individual insurance, bank insurance, group insurance, telemarketing, and brokerage agents, provide customers with a wide range of insurance products including life insurance, health insurance, accident insurance, connected insurance, and yearly/monthly insurance. At the same time, it actively embraces the Internet, is committed to the innovation and development of Internet insurance businesses, integrates online and offline insurance services, provides inclusive insurance products, and strives to build the "Internet Insurance" first brand.

I found many names and phone numbers



Enable artifacts


 

Bytes

 

After testing, it is found that changing the number of rows will clear the next number.


 

 

 

 

Solution: