JeeCMS任意用户密码找回漏洞

### 简要描述： 请不要在客户端验证找回密码所用邮箱或手机号 ### 详细说明： [<img src="https://images.seebug.org/upload/201308/121537054643747b774ace70935da670491a415e.png" alt="jeecms1.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/121537054643747b774ace70935da670491a415e.png) [<img src="https://images.seebug.org/upload/201308/121536437058bd6b40456787cf496133b3db117f.jpg" alt="jeecms2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/121536437058bd6b40456787cf496133b3db117f.jpg) [<img src="https://images.seebug.org/upload/201308/121536323a62ae393b17e3f657ba12c8e8c7e64f.png" alt="jeecms3.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/121536323a62ae393b17e3f657ba12c8e8c7e64f.png) [<img src="https://images.seebug.org/upload/201308/12153616fb01e7022f68db551f95e8a2fa5f5f46.png" alt="jeecms4.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/12153616fb01e7022f68db551f95e8a2fa5f5f46.png) [<img src="https://images.seebug.org/upload/201308/12153604aba20913d3837126ad83f481a6ce525f.png" alt="jeecms6.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/12153604aba20913d3837126ad83f481a6ce525f.png) [<img src="https://images.seebug.org/upload/201308/12153552dd26e0406e48f1343e6a0e5e23dfacc0.png" alt="jeecms7.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/12153552dd26e0406e48f1343e6a0e5e23dfacc0.png) ### 漏洞证明： [<img src="https://images.seebug.org/upload/201308/121537054643747b774ace70935da670491a415e.png" alt="jeecms1.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/121537054643747b774ace70935da670491a415e.png) [<img src="https://images.seebug.org/upload/201308/121536437058bd6b40456787cf496133b3db117f.jpg" alt="jeecms2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/121536437058bd6b40456787cf496133b3db117f.jpg) [<img src="https://images.seebug.org/upload/201308/121536323a62ae393b17e3f657ba12c8e8c7e64f.png" alt="jeecms3.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/121536323a62ae393b17e3f657ba12c8e8c7e64f.png) [<img src="https://images.seebug.org/upload/201308/12153616fb01e7022f68db551f95e8a2fa5f5f46.png" alt="jeecms4.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/12153616fb01e7022f68db551f95e8a2fa5f5f46.png) [<img src="https://images.seebug.org/upload/201308/12153604aba20913d3837126ad83f481a6ce525f.png" alt="jeecms6.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/12153604aba20913d3837126ad83f481a6ce525f.png) [<img src="https://images.seebug.org/upload/201308/12153552dd26e0406e48f1343e6a0e5e23dfacc0.png" alt="jeecms7.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201308/12153552dd26e0406e48f1343e6a0e5e23dfacc0.png)