The partner management system getshell (roaming intranet) is caused by leakage of ZTE's external accounts)

The partner management system getshell (roaming intranet) is caused by leakage of ZTE's external accounts)

Log on to the management system using the leaked account, and then upload the webshell directly at the upload location.

Enter the keyword "Project password" through the QQ search function to obtain the password of an external user in the partner management system.

 

Then log on to the system and submit the monthly report in the staff dynamics under the personnel management. You can directly upload the webshell
 

Click View to access webshell ..

Shell has been deleted ..

 

Solution:

Delete the QQ account and eliminate weak passwords. Upload and determine the Suffix in the background.