Shulou(Shulou.com)06/01 Report--

Recurrence of vulnerabilities:

1. Create a user: ip:8000/create_user/?username=alert (7)

Displays that the user has been created.

two。 Trigger vulnerability to access ip:8000/create_user/?username=alert again (7)

3. Trigger exception: duplicate key value violates unique constraint "xss_user_username_key"

DETAIL: Key (username) = (alert (7)) already exists.

4. This exception is concatenated into the The above exception ({{frame.exc_cause}}) was the direct cause of the following exception, which finally triggers XSS.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.