# Exploit Title: Silly Fellow Persistent XSS (Cross site scripting) # Author: cr4wl3r @hackb0x # Software Link: http://unikscripts.com/yaxal_products.php?display=product&id=72 # Version: all ------------------------------------------------------------------------------------- ------------------------------------------------------------------------------------- # In this case user can execute arbitrary JavaScript code within the vulnerable application # Successful exploitation of this vulnerability could result in a compromise of the application, # theft of cookie-based authentication credentials, disclosure or modification of sensitive data # For example, post your xss into generate, <script>window.alert(document.cookie)</script> # and the script will be execute