Gionee mobile phone remote command execution in a system (Getshell)

Gionee mobile phone remote command execution in a system (Getshell)

Control all company information

Command invocation address: http://mail.gionee.com/m/index.action

Email system. There should be more than 200 users.

SPAM login address http://mail.gionee.com: 8000/snspam/homepage. asp



Although MYSQL is not open to the Internet, it is a weak password, webmail/webmail

If you take control of these company staff mailboxes, it means that you have control over all the company's information and the consequences are very serious.



Backdoor address: http://mail.gionee.com/css1.jsp to delete it yourself
 

 

 

 

 

 

Solution:

Filter