inurl:aol*/_do/rss_popup?blogID=

  • 日期:2004-11-06
  • 类别:
  • 作者:anonymous
  • 语法:inurl:aol*/_do/rss_popup?blogID=
  • AOL Journals BlogID Incrementing Discloses Account Names and Email AddressesAOL Journals is basically "America Online's version of a blog (weblog) for AOL members/subscribers. A vulnerability in AOL Journals BlogID allows an attacker to numbers provided to the program and enumerate a list of AOL members/subscribers and their corresponding email.