WooYun.org

http://ecw.cs-air.com/data/account/setNewPwd.xsql
<?xml version ='1.0' encoding="utf-8"?>
<page connection="ecs" xmlns:xsql="urn:oracle-xsql">
<!--
<xsql:dml commit="no" bind-params="New UserId answer">
begin
update userprofile u set u.password = ? where u.userguid = ? and u.answer=? and u.flag='C';
commit;
end;
</xsql:dml>
-->
<xsql:sso-resetpw userguid="{@UserId}" password="{@New}" answer="{@answer}"/>
<xsql:include-param name="modifyResult"/>
</page>等等等等......