### 简要描述: easytalk存在高级安全隐患XSS进入后台 ### 详细说明: 问题发生在用户提交认证资料处 没有进行任何过滤 ### 漏洞证明: [<img src="https://images.seebug.org/upload/201309/282031376091db8179256bd2b371f09e08f87b25.png" alt="00.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201309/282031376091db8179256bd2b371f09e08f87b25.png) 填入XSS代码 登陆后台查看认证信息 [<img src="https://images.seebug.org/upload/201309/28203204000a38bff87d41f48133d912651f3872.png" alt="01.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201309/28203204000a38bff87d41f48133d912651f3872.png) [<img src="https://images.seebug.org/upload/201309/282032224d5be6135fa057c2fd6d761aed6ab31e.png" alt="02.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201309/282032224d5be6135fa057c2fd6d761aed6ab31e.png)
### 简要描述: easytalk存在高级安全隐患XSS进入后台 ### 详细说明: 问题发生在用户提交认证资料处 没有进行任何过滤 ### 漏洞证明: [<img src="https://images.seebug.org/upload/201309/282031376091db8179256bd2b371f09e08f87b25.png" alt="00.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201309/282031376091db8179256bd2b371f09e08f87b25.png) 填入XSS代码 登陆后台查看认证信息 [<img src="https://images.seebug.org/upload/201309/28203204000a38bff87d41f48133d912651f3872.png" alt="01.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201309/28203204000a38bff87d41f48133d912651f3872.png) [<img src="https://images.seebug.org/upload/201309/282032224d5be6135fa057c2fd6d761aed6ab31e.png" alt="02.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201309/282032224d5be6135fa057c2fd6d761aed6ab31e.png)