A document is leaked, resulting in 12306 direct access to the background of a system

A document is leaked, resulting in 12306 direct access to the background of a system

Some documents should not be leaked.

 

http://www.sheny.12306.cn/Dzsw/downLoad/Dzsw201311doc.doc

 

 

The Manual of the Railway Freight electronic commerce system exposes two points:



Account: 2000014



Shanghai Railway Bureau...

Looking for a long time, found the background: https://frontier.shangh.95306.cn/gateway/hydzsw/Dzsw/login_bur.jsp


 

I did not expect to try 123456, but I went in directly .. :
 

 

You can send text messages to others:
 

Can I use shell? :

Don't go deep...
 

Solution: