Cross-Site vulnerability in Sohu advertising service [doc.go.sohu.com * url =]

Look at the bottom of this turn to where http://doc.go.sohu.com/200712/6e97cd2fea9a0f8ac95439405c4ca95a.php? Url = http://clin003.com

The following figure shows the pages that contain vulnerabilities (search engine index results only)

These links are in Flash file advertisements in Sohu, So Baidu cannot be searched because Google's spider can read part of the text in Flash files, search for Google with this keyword: site: sohu.com [doc.go.sohu.com * url =]

Obviously, the links used are available in club. The following flash and topic news are the links that Sohu actually uses.

Looking for doc.go.sohu.com URL in Baidu, you will find that there are many "malicious links" that have been used. Baidu will find about 905 related webpages in 0.001 seconds.

Search for [doc.go.sohu.com * url =] in Google. There are about1,390Item conformity[Doc.go.sohu.com * url =]The query result.1-10But some Google websites are marked with "this website may contain malware, which may harm your computer .".

The cause of the vulnerability is probably that the staff who designed the ad jump record code wrote a "general code" for ease of use in the future, but did not expect to be found to be how many netizens who trust Sohu will be injured. !!

The following links can be used by search engines:(For the purpose of learning, do not harm people)

Http://doc.go.sohu.com/200801/5cb05572fda7c20a914842413d61ae7d.php? Url =

Http://doc.go.sohu.com/200712/d82c5aba39716d4eb8152d976a2da482.php? Url =

Http://doc.go.sohu.com/200712/e49df42d95615e85312aa0d030a2e552.php? Url =
Http://doc.go.sohu.com/200710/91e2420557be06fc6b4db18e6c7e43b8.php? Url =

Http://doc.go.sohu.com/200709/fd89d3a23c26c83163939a489fac349b.php? Url =

Http://doc.go.sohu.com/200708/adf56d76ba663e3db61b83e84384a141.php? Url =

Http://doc.go.sohu.com/200707/9b5c09c5c3cb8d856393a150683a5d92.php?

Url =

Http://doc.go.sohu.com/200706/fa9cda8c2a8455dc7e69465a16d48565.php? Url =

Http://doc.go.sohu.com/200706/1a22b9706f5ee9794ee29582de28d8a7.php? Url =
Http://doc.go.sohu.com/200705/df7fe00bc4bdb3ab1891dd6be56aa73a.php? Url =

Http://doc.go.sohu.com/200704/92d82b0a5606d9025e44b161597c0180.php? Url =

Http://doc.go.sohu.com/200704/cb19f7e8aa1d533134eea9c1197c423b.php? Url =

Http://doc.go.sohu.com/200703/e463ac8934207e079c5500ebddf964e1.php? Url =

Http://doc.go.sohu.com/200702/4788bbdf19b48e08a119cea260a63aaf.php? Url =

From: Cross-Site vulnerability in Sohu advertising service [doc.go.sohu.com * url =]

Http://wiki.mygogou.com/doc-view-872.html