漏洞文件:phpcms/modules/message/templates/index.php
漏洞代码:
176行:
```
$reply_infos= $this->message_db->listinfo($where,$order = 'messageid ASC',$page, $pages = '10');
```
191行:
```
$reply_infos= $this->message_db->listinfo($where,$order = 'messageid ASC',$page, $pages = '10');
```
漏洞代码:
将176行和191行都替换为成:
```
$reply_infos =new_html_special_chars($this->message_db->listinfo($where,$order = 'messageid ASC',$page, $pages = '10'));
```
暂无评论