Car home vulnerability series-Password modification for any user

1. use the "retrieve password" function of the car house to retrieve the password. 2. the password retrieval function of autohome.com is quite powerful. It supports user name, mobile phone number, and email retrieval. I am very fond of the beauty host, so; 3. click Submit to go to the next step and find that the beauty is bound with a mobile phone number. 4. click "Send and capture packets". I got the mobile phone number of the beauty BROADCASTER: 5. however, we want to modify the mobile phone number of the beauty broadcaster. So I changed the mobile phone number of the beauty broadcaster to my own mobile phone number. As a result, I actually received the text message verification code, I changed my password to "meinv521" to express my affection for the beauty host. 6. after the password is changed, you can directly log on to the account of the beauty broadcaster;
7. The beauty broadcaster can use the background management to query Shenma;Solution:This is simple