Reset any user password in a system of Tongcheng Network (sensitive data is easily leaked)

Reset any user password in a system of Tongcheng Network (sensitive data is easily leaked)

The problem occurs in the self-help ebk system. In order not to affect your online account business, use a test account for demonstration.

Address: http://ebk.17u.cn/zizhuyou/
1. Go to the password retrieval page

2,

Enter either of them, and change the returned response to BURP.

Change flase to true to bypass verification.

You can get the verification code. In the same way, next step

3,

I changed it to SQLmap123.

Try logging in

To prove its hazards and avoid affecting online businesses

Change the password of another test account to SQLmap123.