Tao web site sina oauth login Vulnerability

The website logon system has a vulnerability. you can log on to another account without authorization.

Weibo logon method when logging on to the system
After the Weibo account is successfully verified, return to the jump URL

Http:// I .tao123.com/sina_login.php? Jump = dumps ******
Change the uid next to the account. If the account ID exists on the website, the account will be authorized to log on to the account.
 


After the jump, the authorization code is not verified. The verification only verifies whether the token is valid and the correspondence with the uid is not verified.