Financial Information Leakage of nearly suppliers due to a system design defect in Yintai commercial \ arbitrary operation of any merchant \ Arbitrary File Upload

Financial Information Leakage of nearly suppliers due to a system design defect in Yintai commercial \ arbitrary operation of any merchant \ Arbitrary File Upload

Rt

Http: // 122.224.218.142: 7070/supplier/jsp/index. jsp

Online reconciliation platform for intime department store suppliers
 

Username and password

Return package, change to true
 

Pdf of instructions for downloading the I Rong Platform
 

There are registration steps,
 

Enter the corresponding information,
 

Successfully registered an account
 

I Rong platform address

Http://irou.intime.com.cn: 8380/supplier/jsp/main. jsp
 

Functions

When viewing the basic information, modify the merchant id, which is the id of the merchant, resulting in the operation of any merchant account.
 

First look at the basic information of the merchant
 

 

 

 

 

The information of more than 59000 merchants can be modified by id, and the account of more than 59000 merchants can be operated beyond the authority

Supplier monthly reconciliation
 

 

 

 

Supplier sales reconciliation
 

Sales reconciliation for the current day
 

Financing application, Arbitrary File Upload
 

 

 

Payment can be made in advance
 

 

Solution:

Permission control.