Description
Unauthorized access to the cj_zwcjd.jsp file of the URP educational administration system allows hackers to directly access the background page to operate on users.
URP教务系统 /cj/cj_zwcjd.jsp 路径存在未授权访问
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
http://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2013-025424
https://wooyun.laolisafe.com/bug_detail.php?wybug_id=wooyun-2013-025424
https://www.ddpoc.com/DVB-2021-683.html
https://github.com/Metatronxl/Crawl_urp
http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2013-025424
https://buaq.net/go-21052.html