### 简要描述:
ThinkSNS设计缺陷导致信息泄漏,弱密码害人害自。
### 详细说明:
问题发生在
/public/memcache.php
```
define('ADMIN_USERNAME','admin'); 	// Admin Username
define('ADMIN_PASSWORD','admin');  	// Admin Password
```
开源程序不带这么玩儿的! 
### 漏洞证明:
http://demo.thinksns.com/t3/public/memcache.php
admin
admin
[<img src="https://images.seebug.org/upload/201312/0616044296e7b6fbcc777732fa172e1d7f156344.jpg" alt="thinksns_mc_1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201312/0616044296e7b6fbcc777732fa172e1d7f156344.jpg)
[<img src="https://images.seebug.org/upload/201312/06160455036b8c8ca4fca60fedc150263d98e4f3.jpg" alt="thinksns_mc_2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201312/06160455036b8c8ca4fca60fedc150263d98e4f3.jpg)
 
                      
                    
                  
                
              
             
        
          
暂无评论