Arbitrary File Download from a collaborative Portal System of China Mobile Anhui mobile

Arbitrary File Download from a collaborative Portal System of China Mobile Anhui mobile

Some information about the Intranet system is leaked.

Address: http: // **. **/Page/Login/UserLogin. aspx
 

There is a notice for the user who needs to know that there will be any file download based on experience, and then try again.
 

Then I submitted it and did not proceed to the next step. This database should have a lot of things. Fix it.

 

There is a notice for the user who needs to know that there will be any file download based on experience, and then try again.
 

Then I submitted it and did not proceed to the next step. This database should have a lot of things. Fix it.

Solution:

I guess the server should have an intranet ip address. Fix it now.