Fanwe search reflective XSS (triggered in IE and Chrome)

 

Brief description:

Fanwe search has a reflected XSS vulnerability. Due to differences in browser response processing, this vulnerability can be successfully triggered in IE and Chrome, but cannot be triggered in Firefox.

Detailed description:

The vulnerability POC is as follows:

Http://fanfou.com/home#search? Q = fanfou '% 3E % 3 Ciframe % 20 onload % 3 Dalert (% 2 FXSS % 2F) % 3E

Proof of vulnerability:

Solution:

 

HTML encoding of input data before encapsulating user search input into response

Author: Lu renjia