扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 |
======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name :Minify4Joomla Upload and Persistent XSS Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL :http://waltercedric.com/ Author : Sid3^effects aKa HaRi special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_ greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz ####################################################################################################### Description Minify4Joomla combines, minifies, and caches JavaScript and CSS files on demand to speed up page loads. Minify (BSD license) is a PHP5 app that can combine multiple CSS or JavaScript files, compress their contents ###################################################################################################### Xploit :Upload Vulnerability Step 1 : Register :D Step 2 : Submit your article which has your evil script :P Demo Url :http://website/index.php?option=com_content&view=article&layout=form&Itemid=51 Step 3 : Now check your article.. ####################################################################################################### Xploit: Persistent XSS Vulnerability Attack pattern :">><marquee><h1>XSS3d By Sid3^effects</h1><marquee> 1.The attacker can insert xss scripts in the article section.. 2.To submit your evil xss register and then go and submit your article Demo url : http://website/index.php?option=com_content&view=article&layout=form&Itemid=51 3.Nowcheck your article ####################################################################################################### # 0day no more # Sid3^effects |
体验盒子
