The logic design defect of an PPTV application causes any User Password Reset

1. application site with this defect: http://allstartv.pptv.com
2. register two users, bind a mobile phone to one of them, and use the mobile phone to retrieve the password. The target user is tttttt;

3. Click "send info" to get the mobile phone verification code;

4. Fill in the actual verification code (this can be a brute-force attack here), compare and capture packets;

5. Haha, the Password Reset page for tttttt users is displayed;

 

6. Fill in the password we need to reset to successfully reset the user password;