Command Execution/xss/order traversal at a sub-station in Gome can roam the Intranet

Command Execution/xss/order traversal at a sub-station in Gome can roam the Intranet

 

 

Order traversal:

Http://m.multigold.com.cn/page/myjd/addressEdit.jsp? MemberAddressId = memberaddressid behind 3 is not strictly controlled

Command Execution:

Http://m.multigold.com.cn/wap/pageHome.action

Xss:

Http://m.multigold.com.cn/page/myjd/addressList.jsp this addresslist. jsp page code is written with defects

 

 

 

Solution:

1: The order ID is based on the timestamp.

2: Execute the command to make a patch 2013 S2-016

3: filter special characters