### 简要描述： 某服务器的敏感信息泄露，导致可登陆nc系统，查看若干企业的内部敏感信息。 ### 详细说明： http://117.79.92.214/ 目录遍历，泄露账户信息 [<img src="https://images.seebug.org/upload/201406/251608426449b36ff9f2b96864ee654a199d4137.png" alt="QQ截图20140625140234.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/251608426449b36ff9f2b96864ee654a199d4137.png) 然后登陆http://117.79.92.213/login.jsp [<img src="https://images.seebug.org/upload/201406/251609054d5225947dda418d3cd413354ad457dc.png" alt="QQ截图20140625140208.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/251609054d5225947dda418d3cd413354ad457dc.png) 看到若干帐套信息， 还有数据库的备份脚本， [<img src="https://images.seebug.org/upload/201406/2516093350a8e3ada3cf96b0c1105deebef5bdf6.png" alt="QQ截图20140625140746.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/2516093350a8e3ada3cf96b0c1105deebef5bdf6.png) ### 漏洞证明： http://117.79.92.214/ 目录遍历，泄露账户信息 [<img...
### 简要描述： 某服务器的敏感信息泄露，导致可登陆nc系统，查看若干企业的内部敏感信息。 ### 详细说明： http://117.79.92.214/ 目录遍历，泄露账户信息 [<img src="https://images.seebug.org/upload/201406/251608426449b36ff9f2b96864ee654a199d4137.png" alt="QQ截图20140625140234.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/251608426449b36ff9f2b96864ee654a199d4137.png) 然后登陆http://117.79.92.213/login.jsp [<img src="https://images.seebug.org/upload/201406/251609054d5225947dda418d3cd413354ad457dc.png" alt="QQ截图20140625140208.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/251609054d5225947dda418d3cd413354ad457dc.png) 看到若干帐套信息， 还有数据库的备份脚本， [<img src="https://images.seebug.org/upload/201406/2516093350a8e3ada3cf96b0c1105deebef5bdf6.png" alt="QQ截图20140625140746.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/2516093350a8e3ada3cf96b0c1105deebef5bdf6.png) ### 漏洞证明： http://117.79.92.214/ 目录遍历，泄露账户信息 [<img src="https://images.seebug.org/upload/201406/251608426449b36ff9f2b96864ee654a199d4137.png" alt="QQ截图20140625140234.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/251608426449b36ff9f2b96864ee654a199d4137.png) 然后登陆http://117.79.92.213/login.jsp [<img src="https://images.seebug.org/upload/201406/251609054d5225947dda418d3cd413354ad457dc.png" alt="QQ截图20140625140208.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/251609054d5225947dda418d3cd413354ad457dc.png) 看到若干帐套信息， 还有数据库的备份脚本， [<img src="https://images.seebug.org/upload/201406/2516093350a8e3ada3cf96b0c1105deebef5bdf6.png" alt="QQ截图20140625140746.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/2516093350a8e3ada3cf96b0c1105deebef5bdf6.png)
