웹사이트에 구워진 전체 쿠키보기

script language="javascript"; // 쿠키 읽기 function GetCookie(name){ var arg = name + "="; var alen = arg.length; var clen = document.cookie.length; var i = 0; while(i < clen){ var j = i + alen; if(document.cookie.substring(i, j) == arg) return getCookieVal(j); i = document.cookie.indexOf(" ", i) + 1; if(i == 0) break; } return null; } // 쿠키 읽기 function getCookieVal(offset){ var endstr = document.cookie.indexOf(";", offset); if(endstr == -1) endstr = document.cookie.length; return unescape(document.cookie.substring(offset, endstr)); } // 쿠키 읽기2 - 2중 쿠키에서 사용 function GetCookie2(key1, key2) { var tmp = GetCookie(key1); if(tmp == null) return null; tmp = tmp.split("~"); for(var i = 0; i<tmp.length; i++) { var tmp2 = tmp[i].split("="); if(tmp2.length == 2 && tmp2[0] == key2) { return tmp2[1]; } } return null; } //--> </script> <script language="javascript"> <!-- document.write("cookie : " + document.cookie + "<br>"); document.write("<br>username : " + GetCookie("username") ); document.write("<br>ecid : " + GetCookie("ecid")); document.write("<br>login : " + GetCookie("login")); document.write("<br>adult : " + GetCookie("adult")); document.write("<br>evaluation : " + GetCookie("evaluation")); document.write("<br>========ecid정보=========="); document.write("<br>ecuser : " + GetCookie2("ecid", "ecuser")); document.write("<br>eclname : " + GetCookie2("ecid", "eclname")); document.write("<br>ecfamily : " + GetCookie2("ecid", "ecfamily")); document.write("<br>catvid : " + GetCookie2("ecid", "catvid")); document.write("<br>ectype : " + GetCookie2("ecid", "ectype")); document.write("<br>rowid : " + GetCookie2("ecid", "rowid")); document.write("<br>ecfamily : " + GetCookie2("ecid", "ecfamily")); document.write("<br>ecf : " + GetCookie2("ecid", "ecf")); document.write("<br>mediatype : " + GetCookie2("ecid", "mediatype")); document.write("<br>cusType : " + GetCookie2("ecid", "cusType")); document.write("<br>cbmDomain : " + GetCookie2("ecid", "cbmDomain")); document.write("<br>credate : " + GetCookie2("ecid", "credate")); //--> </script>


XSS