Blind PPTV background with IPAD

I took the lead to test PPTV last night. before going to bed, I was going to use PPTV to watch movies. I logged on to my PPTV member account that expired on April 9, 2020.

Feedback was found.

A piece of cross-site code. ipad typing is really hard. It has been verified several times. After confirmation, it will be sent.

When I got up today, I found that I got one from the back.

Http://dc.ikan.pptv.com/api/error_report/show? Source = ipad

Login-free. Direct access... cookies are not used.

This is the background user feedback page.

No further penetration.

Proof of vulnerability:

Http://dc.ikan.pptv.com/api/error_report/show? Source = ipad

Solution: Hey hey