XSS (跨站脚本)

① 反射型 —— 搜索回显

搜索词 s 搜索

测试 payload: <script>alert(1)</script> <img src=x onerror=alert(1)> <svg/onload=alert(document.domain)> "><script>alert(1)</script>

② 存储型 —— 评论

昵称 评论内容 提交评论

Warning: http_response_code(): Cannot set response code - headers already sent (output started at /www/wwwroot/edgestack.nfr-hk-prokvm.cftenant.com/app/pages/xss.php:22) in /www/wwwroot/edgestack.nfr-hk-prokvm.cftenant.com/app/includes/db.php on line 24
DB connection failed: Access denied for user 'waf_app'@'localhost' (using password: YES)