Toutiao's unauthorized Vulnerability

Toutiao's unauthorized Vulnerability
Toutiao.com is unauthorized (online information can be modified)

Modify the voting information (including the end time, title, and options) of any article to register an account at mp.toutiao.com, post an article, create a vote, and modify the voting information, here, let's take a look at the voting id.

Search for any voting article such as http://toutiao.com/a3742550279/sources code, search for mp-vote-box mp-vote-outer, find the voting idid = "mp-vote-54907580cc0689bdb32c6371 and return to the editing location, change your voting id to 54907580cc0689bdb32c6371 and click Modify.

After editing, submit and view the results

Solution:

Filter