ThinkSNS某功能平行权限4

简要描述： 看到厂商迟迟不确认，所以再来一发，难不成厂商已经放假了？如果是开年求收留！ 详细说明： 问题发生在 wap模块 apps/wap/Lib/Action/IndexAction.class.php 和 apps/w3g/Lib/Action/IndexAction.class.php 行665 public function doDelete $weiboid = intval$GET'weiboid'; if $weiboid urlencode$GET'key','page'=$GET'page'; $data'id' = $weiboid; $detail =...

Tencent Weibo CSRF brush fan of vulnerability-3-vulnerability warning-the black bar safety net

Cloud Wang says Tencent is the GDP from manufacturing. Detailed description: Was accidentally found, well, LOOK! 1）registered a clean account, visit the following POC example; the the the document. se55i0n. submit; 2 See run the POC effect; ! 3 refresh Twitter success your own clouds official...