用360网页检查 得出的跨站攻击脚本代码 写成文本式。直接粘贴代码 会提示我灌水发帖。无语中。。。

域名+ /ask/showlist.asp?id=1

域名+ /ask/q.asp?id=62

域名+ /space/writecomment.asp?UserID=224&UserName=admin&Title=%D3%D0%CA%B2%C3%B4%CE%CA%CC%E2%A3%BF%C7%EB%B4%F3%BC%D2%C1%F4%D1%D4%B8%F8%CE%D2%A1%A3&ID=108")>

域名+ /space/writecomment.asp?UserID=224&ID=108&Title=%D3%D0%CA%B2%C3%B4%CE%CA%CC%E2%A3%BF%C7%EB%B4%F3%BC%D2%C1%F4%D1%D4%B8%F8%CE%D2%A1%A3&UserName=admin")>

域名+ /space/writecomment.asp?UserID=224&ID=108&UserName=admin&Title=%D3%D0%CA%B2%C3%B4%CE%CA%CC%E2%A3%BF%C7%EB%B4%F3%BC%D2%C1%F4%D1%D4%B8%F8%CE%D2%A1%A3")>

域名+ /plus/error.asp?message=%3Cli%3E%B2%CE%CA%FD%B4%AB%B5%DD%B3%F6%B4%ED%21%3C%2Fli%3E&action=error

域名+ /plus/error.asp?action=error&message=%3Cli%3E%B2%CE%CA%FD%B4%AB%B5%DD%B3%F6%B4%ED%21%3C%2Fli%3E

域名+ /mnkc/search.asp?keyword=%E8%AF%B7%E8%BE%93%E5%85%A5%E5%85%B3%E9%94%AE%E5%AD%97

一共有8个  貌似官方出补丁修正了一个

下载信息  [文件大小：0.40 KB 下载次数： 次]

点击下载文件:漏洞.rar