Any user password can be reset if the user password is improperly set at a certain part of yunda Express

Any user password can be reset if the user password is improperly set at a certain part of yunda Express

You can reset any user password in the password retrieval area.

On the registration page, scan several registered user mobile phone numbers.

 

In the password retrieval area, send the verification code, intercept the request, modify your mobile phone number, and enter the verification code you received (bypass this step to determine)
 

Submit, intercept the request, and change it to your mobile phone number (this step can bypass the server to determine)
 

Enter the new password, submit, intercept the request, and send a verification code to change the mobile phone number.

The six digits are quickly broken out. log on to the system.
 

 

Solution:

Server restrictions