Passwords must be enhanced when several sets of email accounts and other sensitive information of Thunder are leaked.

Passwords must be enhanced when several sets of email accounts and other sensitive information of Thunder are leaked.

Leakage of several sets of email accounts and other sensitive information of thunder

1. Email account Leakage

Http://mail.xunlei.com/extmail/cgi/index.cgi

[Email protected] Password 5n25up7w

[Email protected] New Password 3t6u5on3 Aa12345678 (the password was mistakenly changed during the test)
 

 

VcGVuc291cmNlQHh1bmxlaS5qcGc = "onerror =" javascript: errimg (this); "src =" http://www.bkjia.com/uploads/allimg/160316/043J53B2-1.jpg "width =" 600 "/>

Http://mail.cc.sandai.net/extmail/cgi/index.cgi Web can not login, mailbox client can login

[Email protected] Password 121212

[Email protected] Password 121212
 

 

Ii. Sensitive Information Leakage

Http://mail.xunlei.com/extmail/cgi/env.cgi

Http://mail.cc.sandai.net/extmail/cgi/env.cgi

Http://mail.sandai.net/extmail/cgi/env.cgi
 

 

 

 

Above

Solution:

Strong Password