discuz越权回复第二式(回复无权限帖子)

### 简要描述： 另类第二种 ### 详细说明： www.hegouvip.com 他是dz 3.1 非会员是不能在会员专区回复的 [<img src="https://images.seebug.org/upload/201506/291035573d56161355f0d963113f4f5ca90712bf.png" alt="1.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201506/291035573d56161355f0d963113f4f5ca90712bf.png) 看这里哇 分享这里 [<img src="https://images.seebug.org/upload/201506/29103617c823685dec3b0f495063afa9b3038cb7.png" alt="2.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201506/29103617c823685dec3b0f495063afa9b3038cb7.png) 我们弄 尤其要点上同时回复 就会 [<img src="https://images.seebug.org/upload/201506/291037260b3774ab41beee54b80bf6c0a2e56e22.png" alt="3.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201506/291037260b3774ab41beee54b80bf6c0a2e56e22.png) 成功 [<img src="https://images.seebug.org/upload/201506/291037481faeb871276b43f164a5859e2007ed95.png" alt="4.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201506/291037481faeb871276b43f164a5859e2007ed95.png) 现在可以了 [<img src="https://images.seebug.org/upload/201506/2910381641d85816d2d574699a34a9a8aefe3d43.png" alt="5.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201506/2910381641d85816d2d574699a34a9a8aefe3d43.png) ### 漏洞证明： [<img src="https://images.seebug.org/upload/201506/2910381641d85816d2d574699a34a9a8aefe3d43.png" alt="5.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201506/2910381641d85816d2d574699a34a9a8aefe3d43.png)