<p>漏洞描述：</p><p>Discuz! 7.X系列一处问题引发大面积XSS，基本上全部页面和文件都能触发。</p><p>Discuz! 7.2,7.1,7.0三个版本都受影响</p><p>漏洞分析：</p><p>这里拿Discuz! 7.2做分析</p><p>比如Discuz! 7.2安装包里面的第二个文件就是ajax.php</p><p><img alt="1.png" src="https://images.seebug.org/contribute/40c51193-9594-4a9d-b9a2-63a7239ddaf4-1.png" data-image-size="813,640"></p><p>注意最后一行<span class="simditor-caret-start"></span><span class="simditor-caret-end"></span>的showmessage函数，跟进include/global.func.php文件。</p><p><img alt="2.png" src="https://images.seebug.org/contribute/6ae38145-0d97-4082-8a3a-1cba4b00116c-2.png" data-image-size="820,544"></p><p> </p><p><img alt="3.png" src="https://images.seebug.org/contribute/c4d13112-a676-4bb3-8df3-0a0dd5f86b9e-3.png" data-image-size="810,629"></p><p> </p><p><img alt="4.png" src="https://images.seebug.org/contribute/c3b3696b-820f-465a-a5bc-f06ec30711d1-4.png" data-image-size="810,286"></p><p><img alt="5.png" src="https://images.seebug.org/contribute/d37ffbed-e8af-476f-9760-45e2e491b488-5.png"...
<p>漏洞描述：</p><p>Discuz! 7.X系列一处问题引发大面积XSS，基本上全部页面和文件都能触发。</p><p>Discuz! 7.2,7.1,7.0三个版本都受影响</p><p>漏洞分析：</p><p>这里拿Discuz! 7.2做分析</p><p>比如Discuz! 7.2安装包里面的第二个文件就是ajax.php</p><p><img alt="1.png" src="https://images.seebug.org/contribute/40c51193-9594-4a9d-b9a2-63a7239ddaf4-1.png" data-image-size="813,640"></p><p>注意最后一行<span class="simditor-caret-start"></span><span class="simditor-caret-end"></span>的showmessage函数，跟进include/global.func.php文件。</p><p><img alt="2.png" src="https://images.seebug.org/contribute/6ae38145-0d97-4082-8a3a-1cba4b00116c-2.png" data-image-size="820,544"></p><p> </p><p><img alt="3.png" src="https://images.seebug.org/contribute/c4d13112-a676-4bb3-8df3-0a0dd5f86b9e-3.png" data-image-size="810,629"></p><p> </p><p><img alt="4.png" src="https://images.seebug.org/contribute/c3b3696b-820f-465a-a5bc-f06ec30711d1-4.png" data-image-size="810,286"></p><p><img alt="5.png" src="https://images.seebug.org/contribute/d37ffbed-e8af-476f-9760-45e2e491b488-5.png" data-image-size="842,474"></p><p><img alt="6.png" src="https://images.seebug.org/contribute/06ba6c4f-fb76-4092-b606-eaacc0c69b8e-6.png" data-image-size="638,415"></p>
