Reset Password of any account in Guzhen Network

Normal password retrieval requires a mobile phone. There will be no tests or account passwords (confused by various website mechanisms. If some functions are unavailable, try again ..) How does wooyuntest a123456789 reset the password of any account. 1. traverse all user ID http://sozhen.com/ask/userinfo.aspx? Userid = 100 so that we can know the usernames of all users. 2. Next, let's take a look at the cookie above, and we have all the user's id account and password (in this case, an xss is done )... 3. There is also a page to provide our account password (key) http://sozhen.com/innsozhen/center/PersonMotify.aspx

4. Add a permission vulnerability. Refresh
It seems that the password cannot be modified. After the modification is submitted, some pages start to jump confused. Then I started to get confused... 5. Below we need to change the User Password http://yd.sozhen.com/User/InnOL_ModifyUser.aspxSolution:A big problem ...... Security is important, and user experience is also important ..