How to obtain and modify the email address of the mobile phone user verification code of the Suzhou Tongcheng website

Comments: Some websites have become bigger. there will be a small vulnerability. enthusiastic netizens will announce it when they find it. today, a netizen published one. let's take a look at the pure test and find that the mobile phone has not been verified, and then fill in the mobile phone verification. After waiting for N long, the message has not been received, and my heart is evil.
Looking at the code and looking for JS problems, I finally found a problem. I sent a verification code to verify the packet capture. Haha, I can see the verification code.
 
View chart

The verification code is entered!
 
Very depressing. I don't know what the problem is because I haven't received the verification code on my phone!


 
Second;
It seems that there is no impact, but if you forget your password, you need to enter the email address ......
I don't know how to use it
Go to the member center, click "Change email", and enter the email address as needed. The change is successful and the email address is not verified by the original email address ......

Author koohik