Renren.com sub-site vulnerabilities are burning to the main site or even farther

The barrel theory is also called the short-board theory, and the short-board management theory. The so-called "Barrel Theory" is also called the "barrel law". Its core content is: the amount of water in a bucket, it does not depend on the highest block on the bucket wall, but on the shortest block on the bucket wall. According to this, there can be two inferences: first, the barrel can be filled with water only when all the boards on the bucket wall are high enough. Second, as long as there is not enough height in the barrel, the water in the barrel cannot be full. ---- Taken from the wiki official site: yujian.renren.com another storage-type cross-site: feedback, resulting in the leakage of the backend permissions of feedback, and the leakage of an administrator account and sensitive administrator information, affects the main site and public homepage. (It may not be clear before) 1. feedback listhttp: // yujian.renren.com/badoo/opinion/gbolwl


Many comments 2. By the way, I read this meeting, but I still have a lot of information. 3. When I see this meeting, I can read the homepage of Renren from the content, should it be an employee of Renren company, maybe a leader? 4. The postmaster is a super administrator of the Public homepage, it is said that the permission is not small. 5. The background permission of the public homepage is leaked ------------- cut --------- so far, all the information of the Administrator is leaked. from one point to one side, the solution is as follows: