Information Leakage on some servers of changtu network can result in loss.

The leakage of important information on the two machines of changtu network can result in the loss of WebSite Services, if filtering is not strict, leading to backend permission leaks, focus on the server IP address and PORT221.6.35.205: 18888 2. Many applications are run on this server, among which JBOSSJBossJBoss Web Console JMX Invoker: 221.6.35.205: 18888/web-console/InvokerJBoss HttpAdaptor JMXInvokerServlet: 221.6.35.205: 18888/invoker/JMXInvokerServlet JBoss JMX Console Unrestricted Access: 221.6.35.205: 18888/web-console/Unfortunately, the jmx-console is not found. It may be that my technology is not enough, but it doesn't matter. 3. svn information leakage/editor /. svn/entries/editor/js/editor/lang/editor/plugins/anchor/editor/plugins/baidumap/editor/plugins/code/editor/plugins/emoticons/ editor/plugins/emoticons/images/editor/plugins/filemanager/images/editor/plugins/flash/editor/plugins/image/ images/editor/plugins/insertfile/editor/plugins/lineheight/editor/plugins/link/editor/plugins/map/editor/plugins/media/editor/plugins/multiimage/editor/ plugins/multiimage/images/editor/plugins/pagebreak/editor/plugins/plainpaste/editor/plugins/preview/editor/plugins/quickformat/editor/plugins/table/editor/plugins/ template/editor/plugins/tree/css/editor/plugins/tree/images/editor/plugins/wordpaste/editor/themes/common/ editor/themes/default/editor/themes/qq/editor/themes/simple source code: /editor/js /. svn/text-base/kindeditor. js. svn-base/editor/plugins/image /. svn/text-base/image. js. svn-base/editor/js/kindeditor. js/editor/lang/ar. js/editor/lang/en. js/editor/lang/zh_CN.js/editor/lang/zh_TW.js/editor/plugins/code/prettify. js 4. tomcat application is deployed on the server in Shanghai, but Tomcat is deployed on other ports. http://221.6.35.205:8089/ This is what I accidentally met 2 # When I learned about the website background, I accidentally encountered another IP address, which is also 1 · 221. 6.35.202 of changtu. http://221.6.35.202/site/ttschina/ This website is an associated website 2, but this server uses JBOSS http://221.6.35.202/jmx-console/ With jmx-console, You can remotely load the war package, and then the two functions in the xxxx graph can achieve this function successfully loaded · http://221.6.35.202/web-console/
4. Some SQL errors will not be posted. For example, if you search for a job on the recruitment page, I will not elaborate on it. Check it for yourself. (if there is no final day, I will submit it separately ~ Haha)Solution:One word: Delete! Hope to help