乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2016-05-01: 细节已通知厂商并且等待厂商处理中 2016-05-09: 厂商已经主动忽略漏洞,细节向公众公开
无良厂商之天安人寿第二发请忽略
tianan-life.com
点击立即投保,抓包
POST /qysq/womanSeason/createOrderInfo HTTP/1.1Host: mall.tianan-life.comUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateReferer: http://mall.tianan-life.com/qysq/womanSeason/accidentInsureProductproductId=F257FABC1783E26F7A371EC9A86548EBB3BA1D798416AB05B1D84AB623F7B83C618C3EE01C389F1A260FCBB17F27D612Cookie: Hm_lvt_6482ce01efcb92c4d42535fd3379324b=1461830831; Hm_lpvt_6482ce01efcb92c4d42535fd3379324b=1461837748; JSESSIONIDqysq=wdL7XhWGhQ7Z7JpKfzDk24PSnpzppH4HVnvfQprG1NK8njKdlp9T!-1831738105!-774248594; uid=85466da8cc9b8d960d187cf4fc43c541; Hm_lvt_733744af112559df4f41aea5a3faa0ce=1461835603,1461835648; Hm_lpvt_733744af112559df4f41aea5a3faa0ce=1461836231X-Forwarded-For: 8.8.8.8'Connection: closeContent-Type: application/x-www-form-urlencodedContent-Length: 314lifeProductId=F257FABC1783E26F7A371EC9A86548EBB3BA1D798416AB05B1D84AB623F7B83C7A0A9C2D16B2D67C61803E6C00E06C32&premium=50.0&premiumCX=50.00&discount=1&orderId=&INSHARE=1&PAYMENTFASH=0&INSURANCEPLAN=XLY0001H&TERMLENGTHDAY=20&productId=XLY0001H&effectDate=2016-04-29&directButton=%E7%AB%8B%E5%8D%B3%E6%8A%95%E4%BF%9D
危害等级:无影响厂商忽略
忽略时间:2016-05-09 09:00
暂无