51 change the password of any credit card Manager User

51 password change for any user on the mobile client of the credit card Manager

Enable the password retrieval function of the 51 credit card manager mobile client.

The verification code obtained by text message is as follows:

Packet capture after submission

The submitted package does not verify the repeated submission.

4-digit verification code, too good to crack

You can also modify the email address and user name.

After modification, you can log on to another user's account to view others' credit card information.

Solution:

Add a graphic verification code or submitToken parameter when retrieving the password.