Metinfo 6.x存储型XSS分析（CVE-2018-20486）

PHA+PGJyLz48L3A+PGRpdiBjbGFzcz0iYXJ0aWNsZS1jb250ZW50Ij48cD48YSBocmVmPSJodHRwczovL3AzLnNzbC5xaGltZy5jb20vdDAxOTg1OWRhOGI0OWM1Y2RkNC5wbmciIGNsYXNzPSJoaWdoc2xpZGUtaW1nIiB0YXJnZXQ9Il9ibGFuayI+PGltZyBjbGFzcz0ic2l6ZS1mdWxsIHdwLWltYWdlLTE2OTU2MCBhbGlnbmNlbnRlciIgYWx0PSIiIHNyYz0iaHR0cHM6Ly9wMy5zc2wucWhpbWcuY29tL3QwMTk4NTlkYThiNDljNWNkZDQucG5nIiBzdHlsZT0iIiB3aWR0aD0iOTM4IiAvPjwvYT48L3A+PHA+Jm5ic3A7PC9wPjxoMiBpZD0iaDItMCI+MHgwMSDliY3oqIA8L2gyPjxwPk1ldEluZm/ph4fnlKhQSFArTXlTUUzmnrbmnoTvvIznm67liY3mnIDmlrDniYjmnKzkuLo2LjEuM+OAgjIwMTjlubQxMuaciDI35pel77yMTWV0aW5mb+iiq+eIhuWHuuWtmOWcqOWtmOWCqOWei+i3qOermeiEmuacrOa8j+a0nu+8jOi/nOeoi+aUu+WHu+iAheaXoOmcgOeZu+W9leWPr+aPkuWFpeaBtuaEj+S7o+egge+8jOeuoeeQhuWRmOWcqOWQjuWPsOeuoeeQhuaXtuWNs+WPr+inpuWPkeOAguivpVhTU+a8j+a0nuW8lei1t+eahOWOn+WboOaYr+WPmOmHj+imhueblu+8jOi/meenjeaDheWGtei/mOaYr+avlOi+g+WwkeingeeahO+8jOWboOatpOaJk+eul+Wvuei/meS4qua8j+a0nui/m+ihjOWIhuaekOW5tuWtpuS5oOS4gOS4i+aAnei3r+OAgjwvcD48cD4mbmJzcDs8L3A+PGgyIGlkPSJoMi0xIj4weDAyIOW9seWTjeiMg+WbtOWPiuWIqeeUqOadoeS7tjwvaDI+PHA+TWV0aW5mbyA2LnggKDYuMC4wLTYuMS4zKTwvcD48cD7ml6DpnIDnmbvlvZXvvIznn6XmmZPlkI7lj7DnmbvpmYblnLDlnYDjgII8L3A+PHA+Jm5ic3A7PC9wPjxoMiBpZD0iaDItMiI+MHgwMyDmvI/mtJ7liIbmnpA8L2gyPjxwPuaIkeS7rOS7peWumOaWueacgOaWsOeJiDYuMS4z5Li65L6L6L+b6KGM5YiG5p6Q44CC5ryP5rSe54K55L2N5LqOL2FkbWluL2xvZ2luL2xvZ2luX2NoZWNrLnBocCAKMTLooYzvvIwkdXJsX2FycmF55pWw57uE5Lit5p+Q5Liq5YWD57Sg6KKr6LWL5YC857uZJHR1cmVmaWxl77yM57uP6L+H5p2h5Lu25Yik5pat5ZCO6LWL5YC857uZJG1ldF9hZG1pbmZpbGXvvIzpmo/lkI7nu4/ov4dhdXRoY29kZeaWueazleWKoOWvhuWQjuWGjei1i+WAvOe7mSR0cnVlZmlsZeOAguacgOWQjuaJp+ihjHVwZGF0ZQogU1FM5pON5L2c77yM5bCG5LmL5YmN5Yqg5a+G5ZCO55qE5a2X56ym5Liy5o+S5YWl5pWw5o2u5bqT44CCPC9wPjxwPjxhIGhyZWY9Imh0dHBzOi8vcDAuc3NsLnFoaW1nLmNvbS90MDE0MmI0NzViMjU4NzRhZDBjLnBuZyIgY2xhc3M9ImhpZ2hzbGlkZS1pbWciIHRhcmdldD0iX2JsYW5rIj48aW1nIGNsYXNzPSJhbGlnbmNlbnRlciIgYWx0PSIiIHNyYz0iaHR0cHM6Ly9wMC5zc2wucWhpbWcuY29tL3QwMTQyYjQ3NWIyNTg3NGFkMGMucG5nIiBzdHlsZT0iIi8+PC9hPjwvcD48cD7lho3ot5/ouKokdXJsX2FycmF55aaC5L2V6L6T5YWl55qE77yM5Luj56CB56ysN+ihjOWMheWQq+S6hi9hZG1pbi9pbmNsdWRlL2NvbW1vbi5pbmMucGhw77yM6Lef6L+bY29tbW9uLmluYy5waHDjgILlnKjku6PnoIHnrKwxMOihjOWPkeeOsOWPmOmHjyR1cmxfYXJyYXnooqvotYvlgLzvvIzov5nph4zliKnnlKhYZGVidWfmiZPkuIvmlq3ngrnvvIzlj5HnjrAkdXJsX2FycmF55piv5Lul5ZCO5Y+w57ud5a+56Lev5b6E5YiG5Ymy6ICM5oiQ55qE5pWw57uE77yM6ICM5ZCO5Y+w6Lev5b6E5piv5a6J6KOF5pe25bCx56Gu5a6a55qE44CCPC9wPjxwPjxhIGhyZWY9Imh0dHBzOi8vcDMuc3NsLnFoaW1nLmNvbS90MDFmNmM4MjdiNmEwZDY4YTIxLnBuZyIgY2xhc3M9ImhpZ2hzbGlkZS1pbWciIHRhcmdldD0iX2JsYW5rIj48aW1nIGNsYXNzPSJhbGlnbmNlbnRlciIgYWx0PSIiIHNyYz0iaHR0cHM6Ly9wMy5zc2wucWhpbWcuY29tL3QwMWY2YzgyN2I2YTBkNjhhMjEucG5nIiBzdHlsZT0iIi8+PC9hPjwvcD48cD7pgqPmvI/mtJ7mmK/lpoLkvZXkuqfnlJ/nmoTlkaLvvJ/nu6fnu63nnItjb21taW4uaW5jLnBocO+8jOWcqOS7o+eggTc3LTgy6KGM77yM6L+Z5piv5LiA5Liq5YW45Z6L55qE5a+56L6T5YWl5Y+C5pWw5ZCN6L+b6KGM5Y+Y6YeP5rOo5YaM55qE5b6q546v77yM5bm25LiU5piv5ZyoJHVybF9hcnJheei1i+WAvOS5i+WQju+8jOWtmOWcqOWPmOmHj+imhueblua8j+a0nuOAgui/memHjOe7p+e7reaJk+S4i+aWreeCue+8jOiuv+mXruS4i+mdoueahHBhdGg8L3A+PHByZT4vYWRtaW4vbG9naW4vbG9naW5fY2hlY2sucGhwP3VybF9hcnJheVtdPWluamVjdCZuYnNwO2hlcmUmdXJsX2FycmF5W109YTwvcHJlPjxwPuWPr+S7peeci+WIsCR1cmxfYXJyYXnnmoTlgLzlt7Lnu4/ooqvopobnm5blubbkuJTlj6/ku7vmhI/mjqfliLbjgII8L3A+PHA+PGEgaHJlZj0iaHR0cHM6Ly9wNC5zc2wucWhpbWcuY29tL3QwMTFlMTIzYzU2MWZhYTY1YzAucG5nIiBjbGFzcz0iaGlnaHNsaWRlLWltZyIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgY2xhc3M9ImFsaWduY2VudGVyIiBhbHQ9IiIgc3JjPSJodHRwczovL3A0LnNzbC5xaGltZy5jb20vdDAxMWUxMjNjNTYxZmFhNjVjMC5wbmciIHN0eWxlPSIiLz48L2E+PC9wPjxwPuWGjei/lOWbnmxvZ2luX2NoZWNrLnBocO+8jCR1cmxfYXJyYXnnmoTlgLzlj6/ooqvmj5LlhaXliLAkbWV0X2NvbmZpZ+ihqOS4re+8jCRtZXRfY29uZmln5Y+v55SxY29tbWluLmluYy5waHDnmoQ5MC05M+ihjOi/m+ihjOWPmOmHj+azqOWGjO+8jOi/memHjCRtZXRfY29uZmln6KKr6LWL5YC85Li6bWV0X2NvbmZpZ+OAgjwvcD48cD7mjqXkuIvmnaXnnItYU1PnmoTop6blj5HngrnvvIzkvY3kuo4vYXBwL3N5c3RlbS9zYWZlL2FkbWluL2luZGV4LmNsc3MucGhwIArnmoRkb2luZGV45pa55rOV5Lit77yM5q2k5pa55rOV5a+55bqU552A5ZCO5Y+w55qE44CQ5a6J5YWoLeWuieWFqOS4juaViOeOh+OAkeaTjeS9nOOAgueuoeeQhuWRmOWcqOi/m+ihjOWQjuWPsOaTjeS9nOaXtu+8jE1ldGluZm/kvJrmj5DliY3lsIZtZXRfY29uZmln6KGo5Lit55qE5pWw5o2u5Y+W5Ye677yM5bm25pS+5Yiw5YWo5bGA5Y+Y6YePJF9N5Lit77yb5oiR5Lus5Y+v5Lul6Lef6Liq5LiL6L+Z5Liq6L+H56iL77yM5ZyoL2FwcC9zeXN0ZW0vc2FmZS9hZG1pbi9pbmRleC5jbHNzLnBocAogCueahOihjOmmluiwg+eUqOS6hi9hcHAvc3lzdGVtL2luY2x1ZGUvY2xhc3MvbG9hZC5jbGFzcy5waHDkuK3nmoRzeXNfY2xhc3Pmlrnms5XliqDovb3ns7vnu5/nsbvmlofku7bvvIzov5nph4zliqDovb3kuoYvYXBwL3N5c3RlbS9pbmNsdWRlL2NsYXNzL2FkbWluLmNsYXNzLnBocO+8jGluZGV457G757un5om/5LqGYWRtaW7nsbvvvIzlubblnKjmnoTpgKDlh73mlbA8Y29kZT5fX2NvbnN0cnVjdDwvY29kZT7kuK3miafooYzkuobniLbnsbthZG1pbueahOaehOmAoOWHveaVsOOAgjwvcD48cD48YSBocmVmPSJodHRwczovL3AzLnNzbC5xaGltZy5jb20vdDAxYzEzMDlhMjNmNmY2Nzc4NS5wbmciIGNsYXNzPSJoaWdoc2xpZGUtaW1nIiB0YXJnZXQ9Il9ibGFuayI+PGltZyBjbGFzcz0iYWxpZ25jZW50ZXIiIGFsdD0iIiBzcmM9Imh0dHBzOi8vcDMuc3NsLnFoaW1nLmNvbS90MDFjMTMwOWEyM2Y2ZjY3Nzg1LnBuZyIgc3R5bGU9IiIvPjwvYT48L3A+PHA+57un57ut6Lef6L+b5YiwL2FwcC9zeXN0ZW0vaW5jbHVkZS9jbGFzcy9hZG1pbi5jbGFzcy5waHDkuK3vvIzlj5HnjrBhZG1pbuexu+e7p+aJv+S6hmNvbW1vbuexu++8jOWQjOagt+WcqOaehOmAoOWHveaVsOS4reaJp+ihjOS6hueItuexu+eahOaehOmAoOWHveaVsOOAgjwvcD48cD48YSBocmVmPSJodHRwczovL3A0LnNzbC5xaGltZy5jb20vdDAxZWRjOGZiYjRiNTk1NzZhMS5wbmciIGNsYXNzPSJoaWdoc2xpZGUtaW1nIiB0YXJnZXQ9Il9ibGFuayI+PGltZyBjbGFzcz0iYWxpZ25jZW50ZXIiIGFsdD0iIiBzcmM9Imh0dHBzOi8vcDQuc3NsLnFoaW1nLmNvbS90MDFlZGM4ZmJiNGI1OTU3NmExLnBuZyIgc3R5bGU9IiIvPjwvYT48L3A+PHA+6Lef6L+b5YiwL2FwcC9zeXN0ZW0vaW5jbHVkZS9jbGFzcy9jb21tb24uY2xhc3MucGhw77yMY29tbW9u57G755qE5p6E6YCg5Ye95pWw5omn6KGM5LqGbG9hZF9jb25mZ19nbG9iYWzmlrnms5XliqDovb3lhajnq5nphY3nva7mlbDmja7jgII8L3A+PHA+PGEgaHJlZj0iaHR0cHM6Ly9wMS5zc2wucWhpbWcuY29tL3QwMWM2MDc5OTg4ODM4ZGJiZmQucG5nIiBjbGFzcz0iaGlnaHNsaWRlLWltZyIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgY2xhc3M9ImFsaWduY2VudGVyIiBhbHQ9IiIgc3JjPSJodHRwczovL3AxLnNzbC5xaGltZy5jb20vdDAxYzYwNzk5ODg4MzhkYmJmZC5wbmciIHN0eWxlPSIiLz48L2E+PC9wPjxwPmxvYWRfY29uZmlnX2dsb2JhbOaWueazleWcqDEyOOihjO+8jOiwg+eUqGxvYWRfY29uZmln5pa55rOV77yM5omn6KGMU1FM6K+t5Y+l5LuObWV0X2NvbmZpZ+ihqOafpeivouWHuuaJgOacieaVsOaNru+8jOW5tuWwhuWFtuaUvuWcqOWFqOWxgOWPmOmHjyRfTVvigJhjb25maWfigJld5Lit44CCPC9wPjxwPjxhIGhyZWY9Imh0dHBzOi8vcDAuc3NsLnFoaW1nLmNvbS90MDEwMmY4ZGQzMjUzN2U1MzhmLnBuZyIgY2xhc3M9ImhpZ2hzbGlkZS1pbWciIHRhcmdldD0iX2JsYW5rIj48aW1nIGNsYXNzPSJhbGlnbmNlbnRlciIgYWx0PSIiIHNyYz0iaHR0cHM6Ly9wMC5zc2wucWhpbWcuY29tL3QwMTAyZjhkZDMyNTM3ZTUzOGYucG5nIiBzdHlsZT0iIi8+PC9hPjwvcD48cD7lm6DmraTlj6/nn6XvvIzmiJHku6zkuYvliY3mj5LlhaXnmoRYU1Pku6PnoIHooqvmlL7lnKg8Y29kZT4kX01bJiMzOTtjb25maWcmIzM5O11bJiMzOTttZXRfYWRtaW5maWxlJiMzOTtdPC9jb2RlPuS4re+8jOatpOaXtui/mOWkhOS6juWKoOWvhueahOeKtuaAge+8m2xvYWRfY29uZmlnX2dsb2JhbOaWueazleS4reS7o+eggTEyMOihjO+8jOiwg+eUqOS6hmF1dGhjb2Rl5pa55rOV6Kej5a+G5LqGPGNvZGU+JF9NWyYjMzk7Y29uZmlnJiMzOTtdWyYjMzk7bWV0X2FkbWluZmlsZSYjMzk7XTwvY29kZT7jgII8L3A+PHA+PGEgaHJlZj0iaHR0cHM6Ly9wNC5zc2wucWhpbWcuY29tL3QwMWExZDE1ZmI2MTE4NWY3N2YucG5nIiBjbGFzcz0iaGlnaHNsaWRlLWltZyIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgY2xhc3M9ImFsaWduY2VudGVyIiBhbHQ9IiIgc3JjPSJodHRwczovL3A0LnNzbC5xaGltZy5jb20vdDAxYTFkMTVmYjYxMTg1Zjc3Zi5wbmciIHN0eWxlPSIiLz48L2E+PC9wPjxwPuatpOaXtui/lOWbnjxjb2RlPi9hcHAvc3lzdGVtL3NhZmUvYWRtaW4vaW5kZXguY2xzcy5waHA8L2NvZGU+77yM6Kej5a+G5ZCO55qEWFNTIHBheWxvYWTov5vlhaUkbG9jYWx1cmxfYWRtaW7jgII8L3A+PHA+PGEgaHJlZj0iaHR0cHM6Ly9wMi5zc2wucWhpbWcuY29tL3QwMWFmYzFiZjZhMzJlOTc1ZGQucG5nIiBjbGFzcz0iaGlnaHNsaWRlLWltZyIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgY2xhc3M9ImFsaWduY2VudGVyIiBhbHQ9IiIgc3JjPSJodHRwczovL3AyLnNzbC5xaGltZy5jb20vdDAxYWZjMWJmNmEzMmU5NzVkZC5wbmciIHN0eWxlPSIiLz48L2E+PC9wPjxwPmluZGV4LmNsYXNzLnBocOS4reS7o+eggTM56KGM77yM5YyF5ZCr5LqG5qih5p2/L2FwcC9zeXN0ZW0vc2FmZS9hZG1pbi90ZW1wbGF0ZXMvaW5kZXgucGhw77yM6Lef6L+b5YiwaW5kZXgucGhw77yM5ZyoNjbooYzmnKrov4fmu6Tnm7TmjqXovpPlh7rkuoYkbG9jYWx1cmxfYWRtaW7vvIzmnIDnu4jlr7zoh7TkuoZYU1PjgII8L3A+PHA+PGEgaHJlZj0iaHR0cHM6Ly9wMS5zc2wucWhpbWcuY29tL3QwMWVlMGJiNWI4ZTk4NDU3MzQucG5nIiBjbGFzcz0iaGlnaHNsaWRlLWltZyIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgY2xhc3M9ImFsaWduY2VudGVyIiBhbHQ9IiIgc3JjPSJodHRwczovL3AxLnNzbC5xaGltZy5jb20vdDAxZWUwYmI1YjhlOTg0NTczNC5wbmciIHN0eWxlPSIiLz48L2E+PC9wPjxwPua1i+ivlea8j+a0nueahFBPQ+S4ujwvcD48cHJlPmh0dHA6Ly8xMjcuMC4wLjEvTWV0SW5mbzZfMV8zL2FkbWluL2xvZ2luL2xvZ2luX2NoZWNrLnBocD91cmxfYXJyYXlbXT08c2NyaXB0PmFsZXJ0KDEpPC9zY3JpcHQ+JnVybF9hcnJheVtdPWE8L3ByZT48cD7nrqHnkIblkZjmiZPlvIDlkI7lj7Dlronlhagt5a6J5YWo5LiO5pWI546H77yM55u05o6l6Kem5Y+RPC9wPjxwPjxhIGhyZWY9Imh0dHBzOi8vcDIuc3NsLnFoaW1nLmNvbS90MDEzZjJjNTM2ZWYwODU0YjMzLnBuZyIgY2xhc3M9ImhpZ2hzbGlkZS1pbWciIHRhcmdldD0iX2JsYW5rIj48aW1nIGNsYXNzPSJhbGlnbmNlbnRlciIgYWx0PSIiIHNyYz0iaHR0cHM6Ly9wMi5zc2wucWhpbWcuY29tL3QwMTNmMmM1MzZlZjA4NTRiMzMucG5nIiBzdHlsZT0iIi8+PC9hPjwvcD48cD4mbmJzcDs8L3A+PGgyIGlkPSJoMi0zIj4weDA0IOS/ruWkjeaWueahiDwvaDI+PG9sPjxsaT4yMDE55bm0MeaciDLml6Us5a6Y5pa55ZyoPGEgaHJlZj0iaHR0cHM6Ly9mb3J1bS5tZXRpbmZvLmNuL3RocmVhZC0xMzAwLTEtMS5odG1sIj7orrrlnZs8L2E+5Lit56Gu6K6k5LqG6K+l5ryP5rSe77yM5bm25YeG5aSH5Zyo5LiL5LiA5Liq5bCP54mI5pys5Lit5L+u5aSNPC9saT48bGk+5pqC5pe257yT6Kej5o6q5pa977yM5L+u5pS5L2FkbWluL2luY2x1ZGUvY29tbW9uLmluYy5waHDvvIzlnKg4MuihjOWPmOmHj+azqOWGjOS5i+WQjuaPkuWFpTxwcmU+JHVybF9hcnJheT1leHBsb2RlKCREUyxST09UUEFUSF9BRE1JTik7PC9wcmU+PHA+6Ziy5q2iJHVybF9hcnJheeWPmOmHj+iiq+imhuebluOAgjwvcD48L2xpPjwvb2w+PGgzIGlkPSJoMy00Ij48c3Ryb25nPuWPguiAg+mTvuaOpe+8mjwvc3Ryb25nPjwvaDM+PHA+PGEgaHJlZj0iaHR0cHM6Ly93d3cuYW5xdWFua2UuY29tL3Z1bC9pZC8xNDQ5NjY5Ij5odHRwczovL3d3dy5hbnF1YW5rZS5jb20vdnVsL2lkLzE0NDk2Njk8L2E+PC9wPjxwPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9QcHNvZnQxOTkwL01ldGluZm82LjEuMy9pc3N1ZXMvMiI+aHR0cHM6Ly9naXRodWIuY29tL1Bwc29mdDE5OTAvTWV0aW5mbzYuMS4zL2lzc3Vlcy8yPC9hPjwvcD48L2Rpdj48cD48ZGl2PjxkaXY+5pys5paH55Sx5a6J5YWo5a6i5Y6f5Yib5Y+R5biDICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxici8+6L2s6L296Ieq5a6J5YWo5a6iIC0g5pyJ5oCd5oOz55qE5a6J5YWo5paw5aqS5L2TPC9kaXY+PC9kaXY+PC9wPjxwPjxici8+PC9wPg==