Ticket #224 (closed 用户报障: 已处理)

Opened 12 years ago

Last modified 12 years ago

页面跳转至外部站点及出现错误信息提示

Reported by: huweiyi Owned by: dingjianyong
Priority: 最高级（1） Milestone:
Component: 电脑网最数码论坛 Version:
Keywords: Cc:
Due Date: 25/12/2013

Description

29308356
出现这个用户的页面都将跳转至百度
http://img.pconline.com.cn/images/upload/upc/tx/gamesbbs6/1312/25/c0/29985497_1387956532933_1024x1024.png

另外,发现另外用户在起那名档注入代码,导致页面出现以下提示:
http://img.pconline.com.cn/images/upload/upc/tx/gamesbbs6/1312/25/c0/29985519_1387956560590_1024x1024.png

Change History

comment:1 Changed 12 years ago by huweiyi

对上述两个用户进行锁ip、锁用户、清除发帖、屏蔽签名档的处理，暂时解决，后面需及时对漏洞进行修补。

comment:2 Changed 12 years ago by dingjianyong

  • Status changed from new to closed
  • Resolution set to 已处理

在sprint29修复此xss漏洞

Note: See TracTickets for help on using tickets.