A vulnerability has fallen into eight business systems of Beijing chain home real estate brokerage Co., Ltd.

A vulnerability has fallen into eight business systems of Beijing chain home real estate brokerage Co., Ltd.

Http://tc.homelink.com.cn/Login.aspx
Login logic vulnerability exists, causing the administrator password to leak. This entry is routed to the internal system of the chain home.

Http://tc.homelink.com.cn/login.aspxlogin location username admin password enter casually, click Login, then click training Mall, found that you have logged in with the admin account


Click my account to view the admin Password

After obtaining the admin password, can I log on to oa with the correct user name and password to control eight business systems?





You can change the product price



Solution:
Filter