Discuz 3.4 越权登陆漏洞分析

PHAgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsiPjxpbWcgc3JjPSJodHRwczovL25vc2VjLm9yZy9hdmF0YXIvdXBsb2Fkcy9hdHRhY2gvaW1hZ2UvMjZiZTU3OTcwOGY0YTU1Njk0ZDNjYzEzOGZiMTVjMGMv5Zu+54mHLnBuZyIgYWx0PSLlm77niYcucG5nIi8+PC9wPjxoMz7mpoLov7A8L2gzPjxwPkRpc2N1euaYr+S4gOS4qumAmueUqOeahOekvuWMuuiuuuWdm+i9r+S7tuezu+e7n+OAguacgOi/keeci+WIsOS4gOS4qkRpc2N1eumAu+i+kea8j+a0nu+8jOivpea8j+a0nua6kOS6jkRpc2N1euW+ruS/oeeZu+mZhuWKn+iDveOAgkRpc2N1eiAzLjTpu5jorqTlronoo4Xkuoblvq7kv6HnmbvpmYbjgILliKnnlKjov5nkuKrmvI/mtJ7mlLvlh7vogIXlj6/ku6XotormnYPnmbvpmYborrrlnZvlhbbku5bkvJrlkZjnmoTotKblj7fnlJroh7PmmK/nrqHnkIblkZjotKblj7fvvIzkuLvopoHov5jlvpfnnIvohLjjgII8L3A+PGgzPuWOn+eQhjwvaDM+PHA+6aaW5YWI55yL5LqG5LiL5L2c6ICF55qE5o+P6L+w77yM4oCc5aaC5p6c5pyJ55So5oi354K55LqG5LiA5LiL57uR5a6a5b6u5L+h77yM5L2G5piv5bm25rKh5pyJ57uR5a6a4oCdIOi/meWPpeivneivtOeahOW+iOaooeeziu+8jOW8gOWni+ayoeacieaYjueZveS7gOS5iOaEj+aAneOAgueEtuWQjui3n+i/m+S7o+eggeeci+S6huS4gOS4i+OAgjwvcD48cCBzdHlsZT0idGV4dC1hbGlnbjogY2VudGVyOyI+PGltZyBhbHQ9IuWbvueJhzEyNi5wbmciIHNyYz0iaHR0cHM6Ly9ub3NlYy5vcmcvYXZhdGFyL3VwbG9hZHMvYXR0YWNoL2ltYWdlLzA2Y2JjMDg1MWMwODZiNjBmMTkwNmIzNzkzNDM2YTUxL+WbvueJhzEyNi5wbmciIHdpZHRoPSI2NDYiIC8+PGJyLz48L3A+PHA+5ryP5rSe5rqQ56CB5L2N5LqOL3VwbG9hZC9zb3VyY2UvcGx1Z2luL3dlY2hhdC93ZWNoYXQuaW5jLnBocOaWh+S7tuS4reOAguWcqDIyNi0yNDbooYzvvJo8L3A+PHAgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsiPjxpbWcgYWx0PSLlm77niYcxMjMucG5nIiBzcmM9Imh0dHBzOi8vbm9zZWMub3JnL2F2YXRhci91cGxvYWRzL2F0dGFjaC9pbWFnZS84ZGQ3OTI4NmNjZTE3NmZlMmJmNzgxMWVlYWYzNTU3Mi/lm77niYcxMjMucG5nIiB3aWR0aD0iNzkwIiAvPjxici8+PC9wPjxwPuS4u+imgeeci+S4i+S7o+eggeeahOmAu+i+ke+8mjwvcD48cD7nrKwyMzHooYzvvJrku448c3BhbiBzdHlsZT0iY29sb3I6IHJnYigyMjYsIDEzOSwgNjUpOyI+Y29tbW9uX21lbWJlcl93ZWNoYXRtcDwvc3Bhbj7ooajmn6Xor6Llr7nlupRvcGVuaWTnmoTnrKzkuIDmnaHnu5PmnpzvvIzov5nph4xvcGVuaWTlj6/ku6XnlLHnlKjmiLfmjqfliLbjgII8L3A+PHByZT4kbXBtZW1iZXImbmJzcDs9Jm5ic3A7Qzo6dCgnI3dlY2hhdCNjb21tb25fbWVtYmVyX3dlY2hhdG1wJyktPmZldGNoX2J5X29wZW5pZCgkd3hvcGVuaWQmbmJzcDs/Jm5ic3A7JHd4b3BlbmlkJm5ic3A7OiZuYnNwOyRfR0VUWyd3eG9wZW5pZCddKTs8L3ByZT48cD7kuIvpnaLmmK88c3BhbiBzdHlsZT0iY29sb3I6IHJnYigzMiwgMTQ3LCA5Nyk7Ij5mZXRjaF9ieV9vcGVuaWQ8L3NwYW4+5Ye95pWw44CCPC9wPjxwPjIzMuihjO+8muS7jjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDIyNiwgMTM5LCA2NSk7Ij5jb21tb248L3NwYW4+6KGo5Lit5Y+W5Ye65a+55bqUdWlk55qE5omA5pyJ57uT5p6c77yMPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMzIsIDE0NywgOTcpOyI+YXJyYXlfa2V5czwvc3Bhbj4oPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNjUsIDE0MCwgMTc1KTsiPiRtcG1lbWJlcjwvc3Bhbj4p6L+U5Zue55qE5piv5LiK5LiA5q2l5p+l6K+i5pWw5o2u55qEdWlk5YC844CCPC9wPjxwcmU+JG1wbWVtYmVycyZuYnNwOz0mbmJzcDtDOjp0KCdjb21tb25fbWVtYmVyJyktPmZldGNoX2FsbChhcnJheV9rZXlzKCRtcG1lbWJlcikpOzwvcHJlPjxwPjIzNC0yMzfooYzvvJo8L3A+PHA+5Y+W5LiK5LiA5q2l55qE56ys5LiA5p2h5pWw5o2u77yM54S25ZCO5LuOPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMjI2LCAxMzksIDY1KTsiPmNvbW1vbl9tZW1iZXJfYXJjaGl2ZTwvc3Bhbj7ooajph4zlj5blh7rlr7nlupR1aWTnmoTnlKjmiLfmlbDmja7vvIzlsIbor6XnlKjmiLforr7nva7kuLrnmbvlvZXnirbmgIHjgII8L3A+PHByZT4kbWVtYmVyZmlyc3QmbmJzcDs9Jm5ic3A7YXJyYXlfc2hpZnQoJG1wbWVtYmVycyk7CiRtZW1iZXImbmJzcDs9Jm5ic3A7Z2V0dXNlcmJ5dWlkKCRtZW1iZXJmaXJzdFsndWlkJ10sJm5ic3A7MSk7CmlmKCRtZW1iZXIpJm5ic3A7ewombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzZXRsb2dpbnN0YXR1cygkbWVtYmVyLCZuYnNwOzEyOTYwMDApOzwvcHJlPjxwPuagueaNruS4iui/sOmAu+i+ke+8jOS5n+WwseaYr+ivtOWPquimgeefpemBk+eUqOaIt+eahG9wZW5pZOWwseiDveeZu+mZhueUqOaIt+eahOi0puWPt+OAgueci+S6huS4i+W+ruS/oeaOpeWPo+aWh+aho++8jOi/meS4qm9wZW5pZOaYr+WUr+S4gOeahO+8jOW5tuS4lOWPquacieeUqOaIt+aOiOadg+S6huS5i+WQju+8jOWFrOS8l+WPt+aJjeWPr+S7peiOt+WPluOAgui/memHjOaYvueEtuW+l+S4jeWIsG9wZW5pZOOAgjwvcD48cD7lnKjkvZzogIXnmoRwYXlsb2Fk5Lit5rKh5pyJ55yL5Yiwb3Blbmlk5Y+C5pWw44CCPC9wPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Ij48aW1nIGFsdD0iMS5wbmciIHNyYz0iaHR0cHM6Ly9ub3NlYy5vcmcvYXZhdGFyL3VwbG9hZHMvYXR0YWNoL2ltYWdlL2Q0MDBiYmZlYTQxYmFkMmVmNDhkYTBmZWFiZGRiZmFkLzEucG5nIiB3aWR0aD0iNjI5IiAvPjxici8+PC9wPjxwPuWFtuWunui/meS4qlBheWxvYWTlj6rmmK/nmbvpmYbkuoZvcGVuaWTkuLrnqbrnmoTnrKzkuIDkuKrnlKjmiLfjgIJvcGVuaWTkuLrnqbrnmoTmg4XlhrXnm67liY3lj5HnjrDpgJrov4cvcGx1Z2luLnBocD9pZD13ZWNoYXQ6d2VjaGF0JmFjPXd4cmVnaXN0ZXImdXNlcm5hbWU9e25hbWV96L+Z56eN5pa55byP5Y+v5Lul5L2/b3Blbmlk5Li656m677yM5L2G5rOo5YaM55qE5piv5LiA5Liq5paw55qE6LSm5Y+344CCPC9wPjxwPuagueaNruS9nOiAheaJgOivtCDigJzlpoLmnpzmnInnlKjmiLfngrnkuobkuIDkuIvnu5Hlrprlvq7kv6HvvIzkvYbmmK/lubbmsqHmnInnu5HlrprvvIzkvJrlhpnlhaU8Y29kZT5jb21tb25fbWVtYmVyX3dlY2hhdG1wPC9jb2RlPuKAne+8jOi/memHjOKAnOW5tuayoeaciee7keWumuKAneeahOaEj+aAneWwseaYr+e7keWumuWksei0pe+8jG9wZW5pZOS4uuepuu+8jOS9huS9nOiAheS9v+eUqOeahOS9leenjee7keWumuaWueazleivtOeahOW+iOaooeeziuOAgjwvcD48cD7nrKzkuozkuKrmmK/otormnYPop6PpmaTmjIflrpp1aWTnu5HlrprnmoTlvq7kv6HjgILlkIzmoLflnKh3ZWJjaGF0LmluYy5waHDvvIzliKTmlq1jc3JmdG9rZW7mraPnoa7lkI7vvIzliKDpmaQ8Y29kZT5jb21tb25fbWVtYmVyX3dlY2hhdG1wPC9jb2RlPuihqOS4reWvueW6lHVpZOeahOaVsOaNruOAgjwvcD48cCBzdHlsZT0idGV4dC1hbGlnbjogY2VudGVyOyI+PGltZyBhbHQ9IuWbvueJhzEyNC5wbmciIHNyYz0iaHR0cHM6Ly9ub3NlYy5vcmcvYXZhdGFyL3VwbG9hZHMvYXR0YWNoL2ltYWdlLzUxZWM2OWIxYTE1OTZjNjg4YThlOTk3Y2NlYTNlYjIxL+WbvueJhzEyNC5wbmciIHdpZHRoPSI2OTgiIC8+PGJyLz48L3A+PHA+5qC55o2u5Lul5LiK5Lik5Liq5rSe77yM5Y+v5Lul6YGN5Y6G5bm25LiU55m76ZmG5omA5pyJb3Blbmlk5Li656m655qE6LSm5oi344CC5YWI55m75b2V56ys5LiA5Liqb3Blbmlk5Li656m655qE6LSm5Y+3LT7nhLblkI7op6Pnu5EtPuWGjeeZu+mZhuS5i+WQjuWNs+S4uuesrOS6jOS4qm9wZW5pZOS4uuepuueahOeUqOaIt+KApuKApu+8jOiEuOWlveeahOivneaYr+WPr+S7peeZu+mZhmFkbWlu55qE44CCPC9wPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Ij48aW1nIHNyYz0iaHR0cHM6Ly9zMi5heDF4LmNvbS8yMDE5LzAyLzE4L2s2Yml6OC5naWYiIGFsdD0iSW1hZ2UiLz48L3A+PGgzPnBheWxvYWQ8L2gzPjxwPuino+mZpOaMh+WumnVpZOe7keWumueahOW+ruS/oe+8mi9wbHVnaW4ucGhwP2lkPXdlY2hhdDp3ZWNoYXQmYWM9dW5iaW5kbXAmdWlkPXt1aWR9Jmhhc2g9e2Zvcm1oYXNofTwvcD48cD7nmbvpmYbnrKzkuIDkuKpvcGVuaWTkuLrnqbrnmoTotKblj7fvvJovcGx1Z2luLnBocD9pZD13ZWNoYXQ6d2VjaGF0JmFjPXd4cmVnaXN0ZXI8L3A+PGgzPuS/ruWkjTwvaDM+PHA+5Zyo5pyA5paw54mI5pys5Lit5L2c6ICF5Yig6Zmk5LqG6L+Z5q615Luj56CB44CC5LiL6L295pyA5paw54mI5Y2z5Y+v44CCPC9wPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7Ij48aW1nIGFsdD0i5Zu+54mHMTI1LnBuZyIgc3JjPSJodHRwczovL25vc2VjLm9yZy9hdmF0YXIvdXBsb2Fkcy9hdHRhY2gvaW1hZ2UvOTlkOTAzN2M1Yzk4ZDg0MGVjYzRmNDNmMTliYjI4NmUv5Zu+54mHMTI1LnBuZyIgd2lkdGg9Ijc5MCIgLz48YnIvPjwvcD48aDM+5Y+C6ICDPC9oMz48cD48YSBocmVmPSJodHRwczovL2dpdGVlLmNvbS9Db21zZW56RGlzenV6L0Rpc2N1elgvaXNzdWUvSVBSVUkiPmh0dHBzOi8vZ2l0ZWUuY29tL0NvbXNlbnpEaXN6dXovRGlzY3V6WC9pc3N1ZS9JUFJVSTwvYT48L3A+PGhyLz48cCBzdHlsZT0iY29sb3I6IHJnYig1MSwgNTEsIDUxKTsiPuacrOaWh+eUseeZveW4veaxh+WOn+WIm++8jOi9rOi9veivt+azqOaYjuadpea6kO+8mjxhIGhyZWY9Imh0dHBzOi8vbm9zZWMub3JnL2hvbWUvZGV0YWlsLzIyNTYuaHRtbCI+aHR0cHM6Ly9ub3NlYy5vcmcvaG9tZS9kZXRhaWwvMjI1Ni5odG1sPC9hPjwvcD48cD48YnIvPjwvcD4=