A System in Tianya has been added to the background management of the Forum for xss blind access.

A System in Tianya has been added to the background management of the Forum for xss blind access.

Tianya customer service system has million xss user information, which can be managed in the background of the Forum (users with insufficient customer service permissions can only view)

I sent you an email and waited for more than a month without responding .....

I had to suspend customer service.


Blacklist


 

;;

These two blacklist scripts, <>

Submitted multiple times to construct
 

Bypass

50 million user information

Intranet Information

Tianya community management ,,,,
 
 
Solution:
Escape and filter