cmseasy最新版存储型XSS+代码分析(可绕过xss防护机制)
简要描述: cmseasy 5.5.0.20140605 详细说明: bbs/ajax.php $data = array; $POST'content' = unescape$POST'content'; $data'aid' = isset$POST'aid' ? intval$POST'aid' : exit0; $data'tid' = isset$POST'tid' ? intval$POST'tid' : 0; $data'content' = isset$POST'content' ? $POST'content' : exit0; $data'username' =...