### 简要描述：
配置错误导致遍历漏洞，监控log文件报告，可以找到关键sql语句
内部敏感数据遍历下载，服务器集群ip泄露，财务收入报表随意下载，危险程度自知！
### 详细说明：
```
http://kdeas.kingdee.com//easWebClient/
http://kdeas.kingdee.com/nap/
http://kdeas.kingdee.com//client/
http://global.kingdee.com/en/products/kis/
http://login.mykingdee.com/login?service=http%3A%2F%2Fkdeas.kingdee.com%3A7888%2Feasportal%2F
%3Bjsessionid%3DwKjIVx7QUW4U0KJcrnuDNk71l-2rDge04rYA
http://web20.kingdee.com/down
http://kdeas.kingdee.com/easfiles/easdoc/files/
```
http://www.kingdee.com/sitemap.xml 网站地图
配置错误导致遍历漏洞，监控log文件报告，可以找到关键sql语句 配置文件信息外露，代码泄露！
### 漏洞证明：
[<img src="https://images.seebug.org/upload/201304/17105138dada7b9d56cd85ef3c4865341a2ebce6.jpg" alt="5.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17105138dada7b9d56cd85ef3c4865341a2ebce6.jpg)
[<img src="https://images.seebug.org/upload/201304/1710512782addc1ffba2f13bd971072278032491.jpg" alt="4.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/1710512782addc1ffba2f13bd971072278032491.jpg)
[<img src="https://images.seebug.org/upload/201304/17105111d87b72a0e54e93ebd22f9158b5d9811c.jpg" alt="3.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17105111d87b72a0e54e93ebd22f9158b5d9811c.jpg)
[<img src="https://images.seebug.org/upload/201304/1710505722e2e43223073b330370a2b4da9161b3.jpg" alt="2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/1710505722e2e43223073b330370a2b4da9161b3.jpg)
[<img src="https://images.seebug.org/upload/201304/17105030eb334c84079c91e13569e2f477e68ae1.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17105030eb334c84079c91e13569e2f477e68ae1.jpg)
[<img src="https://images.seebug.org/upload/201304/17112905479873e6df1854e61eb392dfca36adc3.jpg" alt="4.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17112905479873e6df1854e61eb392dfca36adc3.jpg)
[<img src="https://images.seebug.org/upload/201304/17112847981b5ad8619c9f0908ae1282b123f234.jpg" alt="3.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17112847981b5ad8619c9f0908ae1282b123f234.jpg)
[<img src="https://images.seebug.org/upload/201304/17112745fc78feffc09fcea848d12eda20d354d6.jpg" alt="2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17112745fc78feffc09fcea848d12eda20d354d6.jpg)
[<img src="https://images.seebug.org/upload/201304/17112734f0046fcbb99ef138d17bd21224074bdf.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201304/17112734f0046fcbb99ef138d17bd21224074bdf.jpg)
京ICP备10040895号
暂无评论