Pages: 1/1 First page 1 Final page [ View by Articles | List ]

利用sohu网站URL跳转漏洞欺骗邮箱密码

  [阴 May 28, 2008 09:53 | by ]
作者:空虚浪子心[XGC]
url跳转漏洞遍布各大网站,简单看一下,THE9、sohu等居然都存在这个漏洞!我们就拿sohu为例,讲一下该漏洞。来到sohu的用户注册页面,可以看到,在IE地址栏里,默认写着http://passport.sohu.com/web/signup.jsp?appid=1000&ru=http://login.mail.sohu.com/reg/signup_success.jsp
Pages: 1/1 First page 1 Final page [ View by Articles | List ]