jeecms官方论坛逻辑与定向xss

### 简要描述： 逻辑错误。外加N个 XSS跨站 ### 详细说明： [<img src="https://images.seebug.org/upload/201305/091522226febc226eb587702b3102b349e008277.jpg" alt="xss2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/091522226febc226eb587702b3102b349e008277.jpg) [<img src="https://images.seebug.org/upload/201305/091522128f8f361a38c110b777b0c21103f83966.jpg" alt="xss.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/091522128f8f361a38c110b777b0c21103f83966.jpg) http://bbs.jeecms.com 登陆了以后有一个积分。在积分兑换的时候。出现了逻辑错误。我没太仔细看代码。应为你们论坛不停的弹窗。烦 附送一个xss指定用户的漏洞 ### 漏洞证明： [<img src="https://images.seebug.org/upload/201305/091520348249452435b4cc5cf196ac059508d6e2.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/091520348249452435b4cc5cf196ac059508d6e2.jpg) [<img src="https://images.seebug.org/upload/201305/09152023a5b2f3d165fde3cda35f0e6d5a3bee3b.jpg" alt="2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/09152023a5b2f3d165fde3cda35f0e6d5a3bee3b.jpg) [<img src="https://images.seebug.org/upload/201305/0915201299069dc088ae4131a436afe1f9fc66ed.jpg" alt="3.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/0915201299069dc088ae4131a436afe1f9fc66ed.jpg) [<img src="https://images.seebug.org/upload/201305/09152003d9c607aeef924ed9219cee8c64cc742d.jpg" alt="4.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/09152003d9c607aeef924ed9219cee8c64cc742d.jpg) [<img src="https://images.seebug.org/upload/201305/0915194853a617e3d9578acdcf02d3bb8676c103.jpg" alt="5.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/0915194853a617e3d9578acdcf02d3bb8676c103.jpg) [<img src="https://images.seebug.org/upload/201305/091519199121b84ad4681e13fb623fdb66801f54.jpg" alt="6.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201305/091519199121b84ad4681e13fb623fdb66801f54.jpg)