A gps scheduling station of Anhua agricultural insurance has the java deserialization vulnerability, which can directly write a large amount of leaked policy information (name, mobile phone number, and other sensitive information)

A gps scheduling station of Anhua agricultural insurance has the java deserialization vulnerability, which can directly write a large amount of leaked policy information (name, mobile phone number, and other sensitive information)

Http: // 221.8.57.106: 7002/mses/GPS scheduling system-the logon page has the java deserialization vulnerability, which can be directly written to the shellhttp: // 221.8.57.106: 7002/uddiexplorer/cccc. jsp. The password is pp.

/Home/weblogic/mobile_domain/config/jdbc
Jdbc: oracle: thin: @ 10.0.7.101: 1521: ahdb
Oracle. jdbc. xa. client. OracleXADataSource


User
Msestest

Vulnerability repair suggestions: Upgrade