phpwind 9.0...

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

<p>1、漏洞文件为:<a href="http://www.phpwind.net/res/js/dev/util_libs/jPlayer/Jplayer.swf" rel="nofollow">http://www.phpwind.net/res/js/dev/util_libs/jPlayer/Jplayer.swf</a><br><br>2、反编译后看代码:</p><pre class=""><code>this.jQuery = (((loaderInfo.parameters.jQuery + "('#") + loaderInfo.parameters.id) + "').jPlayer");<br style="margin: 0px; padding: 0px;"> ……<br style="margin: 0px; padding: 0px;"> private function init(_arg1:TimerEvent):void{<br style="margin: 0px; padding: 0px;"> this.myInitTimer.stop();<br style="margin: 0px; padding: 0px;"> if (ExternalInterface.available){<br style="margin: 0px; padding: 0px;"> ……<br style="margin: 0px; padding: 0px;"> ExternalInterface.call(this.jQuery, "jPlayerFlashEvent", JplayerEvent.JPLAYER_READY, this.extractStatusData(this.commonStatus));<br style="margin: 0px; padding: 0px;"> };<br style="margin: 0px; padding: 0px;">...

0%
暂无可用Exp或PoC
当前有0条受影响产品信息