2012-09-29: 细节已通知厂商并且等待厂商处理中 2012-10-04: 厂商已经主动忽略漏洞,细节向公众公开
绕过舞曲房间的VIP和随意进限制
当房间人满3000的时候会提示你进不去。如果在弹出这个窗口之前获取网页源码。然后再弹出之后修改为弹出网页之前的源码可以绕过VIP和随意进限制。
之后
之前弹窗之后 去掉下面这段代码即可。
default://正常模板 page.uid=pageMessage.user.uid; var _iszhan = parseInt('0'); if(page.puid != page.uid && page.liveType ==0 && (page.myVideo.url!=''||_iszhan==1) ){ // 录像 page.isVideo=1; if(_iszhan==1){ swfobject.embedSWF('apple/musicPlayer/smallShow.swf', 'videoPlayer', 464, 457, '10.1', page.noF, {uid:page.rid}, {wmode:'opaque'}); document.getElementById('preTopGift').style.display='none'; }else{ var vvp=page.myVideo.type==2 ? page.VplayerPP: page.Vplayer; swfobject.embedSWF(vvp, 'videoPlayer', page.fw, page.fh, '10.1', page.noF, {vid:page.myVideo.url, pvid:page.myVideo.url, flag:1, model:1}, {wmode:'transparent'}); } }else{ if(page.puid == page.uid){ // 房主 var g_fx264installed=false; (function(){ try{ g_fx264installed=PlugTest(); }catch(e){ setTimeout(arguments.callee, 50); return; } var userInfo = Login.getUserInfo(); page.liveMaster=1; memo=encodeURIComponent("{'url':'"+location.href+"'}");//参数集 //var wmode = Browser.firefox?'window':'opaque'; swfobject.embedSWF(page.Mplayer, "videoPlayer", page.fw, page.fh, "10.1", page.noF, {uid: page.uid, userName: pageMessage.user.username, userPassword:userInfo.pwd, fx264:g_fx264installed, cooperateid:'', memo:memo, v6size:'400*300'}, {wmode:'opaque', allowscriptaccess:'always'}, {id:'videoPlayer'}); if(page.liveType ==0 && page.myVideo.url!=''){ var _div = document.createElement('div'); _div.id='changePlayerBtn'; _div.className='vVideoBtn'; _div.innerHTML = '<em onclick="return changePlayer()"></em>'; document.getElementById('video').appendChild(_div); } })(); }else{ var autoPlay = page.liveType==10?'true':''; swfobject.embedSWF(page.Fplayer, 'videoPlayer', page.fw, page.fh, '10.1', page.noF, {mute:0, fileName:(page.flvTitle&&page.flvTitle[1].flvtitle?page.flvTitle[1].flvtitle:''), autoplay:autoPlay/*自动取流*/, libUrl:'http://rio.6rooms.com/lib/lib.asp', ServerURL:page.uploadurl}, {allowscriptaccess:'always',wmode:'Opaque'}); } } }}).script(JSF.mt).wait().script(JSF.z).wait(function(){ if($6('myAccountTool')){ controlCenter = new ControlCenter({centerBtn:$('myAccountTool')}); } if(Browser.name == 'ie' && Browser.version == 6){ $LAB.script(JSF.png).wait(function(){ DD_belatedPNG.fix('.talentshowIco'); }) }}).script(JSF.room).wait(function(){ AddReady(function(){ setTimeout(function(){ var _imgs = document.getElements('img[data-src]'); for(var i=0; i<_imgs.length; i++){ _imgs[i].src = _imgs[i].getAttribute('data-src'); _imgs[i].removeAttribute('data-src'); } },500); Room.init(); });}).script(JSF.im).script(JSF.mission);if(__tpl__!='game'){ //边栏 $LAB.script(JSF.gmsg);}</SCRIPT>
禁止修改即可。
危害等级:无影响厂商忽略
忽略时间:2012-10-04 11:22
暂无