In a Typecho Blog system, xss can be stored in the background shell.

In a Typecho Blog system, xss can be stored in the background shell.

Write an article and comment on it.

 

Insert xss code. Then it is found to be hidden, which is obviously not filtered out.

Reply to the code containing xss
 

Assume that the Administrator logs on to the background to view
 

Take a look at the content
 

Find that wood is filtered

Check that the xss platform successfully hits the cookie.
 

-----------------------------------

Enter the background

Shell

Edit module
 

Modify file insert Trojan
 

Capture the package to get the address. Actually, if you are familiar with the blog system, you can guess the address, just like the wp blog.

Solution:

Filter

Small gift