The logical defect of China's letter-preserving email system has acquired staff and sensitive information.

The logical defect of China's letter-preserving email system has acquired staff and sensitive information.

Http: // **. **/coremail/index. jsp

The email system can crack down and obtain employee emails and other sensitive information.

 

Capture post information
 

If you use a common person name, only password 123456 is used to crack the password. If 302 is returned, the attack is successful.
 

 

 

 

Successfully logged on to obtain sensitive information about the address book and email

Solution:

Verification and frequency limit