Warning: Constant UC_APPID already defined, this will be an error in PHP 9 in C:\wwwroot\9et.cn\bbs\config.inc.php on line 83

Warning: htmlspecialchars(): Charset "gbk" is not supported, assuming UTF-8 in C:\wwwroot\9et.cn\bbs\include\common.inc.php on line 84

Warning: Constant FORMHASH already defined, this will be an error in PHP 9 in C:\wwwroot\9et.cn\bbs\include\common.inc.php on line 254

Warning: Undefined variable $uchome in C:\wwwroot\9et.cn\bbs\include\common.inc.php on line 405

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\include\common.inc.php on line 405

Warning: Undefined variable $feedpostnum in C:\wwwroot\9et.cn\bbs\include\common.inc.php on line 413

Warning: Undefined array key "types" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 115

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 115

Warning: Undefined array key "types" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 116

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 116

Warning: Undefined variable $ismoderator in C:\wwwroot\9et.cn\bbs\viewthread.php on line 184

Warning: Undefined array key "allowreply" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 217

Warning: Undefined array key "allowreply" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 217

Warning: Undefined array key "allowpost" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 218

Warning: Undefined array key "allowpost" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 218

Warning: Undefined array key "visitedfid" in C:\wwwroot\9et.cn\bbs\include\forum.func.php on line 118

Deprecated: explode(): Passing null to parameter #2 ($string) of type string is deprecated in C:\wwwroot\9et.cn\bbs\include\forum.func.php on line 118

Warning: Undefined array key "visitedfid" in C:\wwwroot\9et.cn\bbs\include\forum.func.php on line 130

Warning: Undefined array key "webnum" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 244

Warning: Undefined array key "bbsnum" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 246

Warning: Undefined variable $dzfeed_limit in C:\wwwroot\9et.cn\bbs\viewthread.php on line 532

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 532

Warning: Trying to access array offset on false in C:\wwwroot\9et.cn\bbs\viewthread.php on line 318

Warning: Trying to access array offset on false in C:\wwwroot\9et.cn\bbs\viewthread.php on line 318

Deprecated: Automatic conversion of false to array is deprecated in C:\wwwroot\9et.cn\bbs\viewthread.php on line 318

Warning: Undefined array key 1 in C:\wwwroot\9et.cn\bbs\viewthread.php on line 319

Warning: Undefined variable $authorid in C:\wwwroot\9et.cn\bbs\viewthread.php on line 342

Warning: Undefined variable $fieldsadd in C:\wwwroot\9et.cn\bbs\viewthread.php on line 399

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 578

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 578

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 583

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 583

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 525

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 584

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 584

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 584

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 585

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 585

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 585

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 588

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 588

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 588

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 616

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 616

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 616

Warning: Undefined array key "usergroups" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 646

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 646

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\viewthread.php on line 646

Warning: htmlspecialchars(): Charset "gbk" is not supported, assuming UTF-8 in C:\wwwroot\9et.cn\bbs\viewthread.php on line 486

Warning: Undefined array key "newbietask" in C:\wwwroot\9et.cn\bbs\viewthread.php on line 491
QQ最新漏洞:QQ2010SP1聊天记录能执行Html代码 - 杰特通信 - 杰特论坛

Warning: Undefined array key "global_header" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 117

Warning: Undefined array key "viewthread_top" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 130
返回列表 下一主题 ›› ‹‹ 上一主题 回复 发帖

Warning: Undefined array key "viewthread_middle" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 232

Warning: Undefined variable $allowpostvideo in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 270

QQ最新漏洞:QQ2010SP1聊天记录能执行Html代码


Warning: Undefined array key "stars" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 352


Warning: Undefined array key "viewthread_sidetop" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 353

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 353

Warning: Undefined variable $customauthorinfo in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 354

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 354

Warning: Undefined array key "viewthread_sidebottom" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 358

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 358
1
Warning: Undefined variable $postno in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 382

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 382
打印
tT

Warning: Undefined array key "groupicon" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 404

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 404
游戏
Warning: Undefined array key "viewthread_postheader" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 408

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 408
发表于 2010-8-3 10:36 | 只看该作者

QQ最新漏洞:QQ2010SP1聊天记录能执行Html代码


Warning: Undefined array key "viewthread_posttop" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 457

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 457
腾讯QQ一向是腾讯主打的产品，意想不到前天发布的QQ2010SP1竟然有如此大漏洞。用户可以随意在消息中使用Javascript、Html，腾讯并没有对此进行有效的屏蔽，如此低级漏洞，在QQ这样的软件中出现实属罕见，可能是那天给骂糊涂了。

　　截止发稿之日起，腾讯还没有对此漏洞给出解决办法，首先囧一下：脚本出错还会提示错误


　　1、消息记录的Javascript、Html标签没有屏蔽


　　2、消息盒子Javascript、Html标签没有屏蔽


　　3、小实验
　　发送代码：<input />
　　因为腾讯会自动将url转换，我们必须混淆url才能发送


　　4、超牛代码
　　　<img src=’tetet’/>
　　因为要点击才能触发，想到一个不用点击就能触发的代码。希望腾讯快点修复，本漏洞由TGL发现。


Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 481

Warning: Undefined array key "imagelist" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 483

Warning: Undefined array key "attachlist" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 483

Warning: Undefined variable $relatedtagstatus in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 505

Warning: Undefined array key "viewthread_postbottom" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 510

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 510

Warning: Undefined array key "modaction" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 538

Warning: Undefined array key "magicname" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 538
收藏 分享
Warning: Undefined array key "viewthread_useraction" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 555
回复 引用
Warning: Undefined array key "viewthread_postfooter" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 592

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 592


Warning: Undefined variable $aimgs in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 638

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 638

Warning: Undefined array key "viewthread_endline" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 641

Warning: Trying to access array offset on null in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 641
返回列表 下一主题 ›› ‹‹ 上一主题

Warning: Undefined array key "viewthread_middle" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 675

Warning: Undefined array key "viewthread_bottom" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 749

Warning: Undefined array key "newbietask" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 804

Warning: Undefined array key "footerbanner1" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 805

Warning: Undefined array key "footerbanner2" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 805

Warning: Undefined array key "global_footer" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 809

Warning: Undefined array key "funcsiteid" in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1662

Warning: Undefined array key "funckey" in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1663

Deprecated: explode(): Passing null to parameter #2 ($string) of type string is deprecated in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1671

Warning: Undefined array key 1 in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1671

Warning: Undefined array key "HTTP_REFERER" in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1637

Warning: Undefined array key 2 in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1640

Deprecated: trim(): Passing null to parameter #1 ($string) of type string is deprecated in C:\wwwroot\9et.cn\bbs\include\global.func.php on line 1644

Warning: Undefined array key "bbsnum" in C:\wwwroot\9et.cn\bbs\forumdata\templates\STYLEID_2_viewthread.tpl.php on line 837