A vulnerability in shundian online store may leak a large number of member and order information (various payment keys)

A vulnerability in shundian online store may leak a large number of member and order information (various payment keys)

In November 12, 2014, Shenzhen shundian Chain Co., Ltd. was successfully listed on the New Three board, known as "Chinese Nasdaq. Code of shares: 831321, with a face value of 1 yuan, total share capital (13298.4082 shares): 4698.2517; convertible shares (SHARES ):

Site

http://www.sundan.com/

Http://www.sundan.com/data/the directory can be traversed
 

 

Member information:
 

 

Shipping address:
 

 

Order Information:
 

 

Site configuration information:
 

 

 

Solution:

Static Directory Traversal