Article directory
Preface
There is an RCE vulnerability in the ERP system of the carton manufacturing industry, and attackers can obtain sensitive information through specific payload injection.
statement
Please do not use the relevant technologies in this article to engage in illegal testing. Any direct or indirect consequences and losses caused by the dissemination and use of the information or tools provided in this article are the responsibility of the user himself. All adverse consequences and The author of the article is irrelevant. This article is for educational purposes only.
1. Product introduction
The ERP system of the manufacturing carton industry involves all aspects of carton enterprise management, including cost accounting, quotation and pricing, order placement, production scheduling, on-site management, finished product warehousing, shipping and distribution, full business process financial settlement, and quality management throughout. Elevate the management level of carton enterprises to a new level and realize the management concepts of accurate calculation, reasonable planning, efficient supervision, division of labor and cooperation, and full communication.
2. Assets affected
企望ERP系统
3. Asset discovery
fofa：title="企望制造ERP系统"hunter：app.name="企望制造ERP"