i'm wondering if we could find an XSS on a site then i can run my PHP code by for example embedding the source in the page or something or using eval in javascri开发者_运维知识库pt ? any thoughts ?
no, that would be a remote code execution or remote file inclusion, not a xss.
精彩评论