More and more I feel that the password reset vulnerability is fun.
The site password reset process:
Fill in the account & register mobile phone -> perform security verification (fill in the security question) -> send SMS verification code
Through the information collection, I got the admin account and mobile phone number. But there's no way around it.
Then I registered an account, reset my password later, and found an ID in the second stage, and then changed the ID to the id of admin. In the third stage, the mobile phone number became a text message to admin. Yes, modify it to your own. get.
Personal summary:
Follow IDs, and cookies. Try to replace it with your own.