Baidu Data Research Center XSS & amp; activation account & amp; password Modification

Register account http://data.baidu.com/register.html At Baidu Data Research Center
 
 
Then the system prompts "you have registered successfully. Please log on to your mailbox to complete activation! "
 
 
Log on to the account and prompt "this account is not activated! ", Click the" resend verification email "button below
 
 
Jump to http://data.baidu.com/activeUser.php first? Sign = 4e885bc5ac35742144e4dc8c8bed3879 page
The user name and the link for activating the account are displayed on this page:
Baidu "> For your information security, click the link below to activate your account:
Http://data.baidu.com/verifyUser.php? U = 4e885bc5ac35742144e4dc8c8bed3879109cedd671125c8a77d69ade7e2f7a1a
 
Thank you for your support for Baidu Data Research Center!
Baidu Data Research Center <script> window. location = "http://data.baidu.com/reactiveOk.html" </script>
(If the box is not displayed, This is a flash. After the account is activated, this link becomes invalid)
 
 
Instantly jump to http://data.baidu.com/reactiveOk.html activated successfully
 
 
 
The password can be changed successfully if any old password is entered.
Access the activation link shown above. You can directly log on without your password, which is permanently valid.


Author drops @