FDUNetworkLogin

# -*- coding: utf-8 -*-
#!/usr/bin/env python
#
#__author__= 'ihciah@gmail.com'

import urllib,urllib2

def login(username, password):
    url="http://10.108.255.249/include/auth_action.php"
    data={"username": username,
          "password": password,
          "action": "login",
          "ac_id": 1,
          "ajax": 1}
    urllib2.urlopen(url,urllib.urlencode(data))


username="13307130364"  # Your real username here
password="" # Your real password here

login(username, password)

curl http://10.108.255.249/cgi-bin/do_login -d "username=13307130364&password={TEXT}&drop=0&type=1&n=100"

wget -qO- http://10.108.255.249/cgi-bin/do_login --post-data="username=13307130364&password={TEXT}&drop=0&type=1&n=100" &> /dev/null

Blank password bug fixed. 漏洞报告者太坏了！

Update:
curl http://10.108.255.249/include/auth_action.php -d "action=login&username=your_real_username&password=your_real_password&ac_id=1&ajax=1"