PhpOnlineChat 3.0 – Cross-Site Scripting
# Exploit Title: [phponlinechat xss ] # Date: [5/9/2014] # Exploit Author: [N0 Feel] # Vendor Homepage: [http://phponlinechat.com/phpchat] # Software Link: [http://phponlinechat.com/chat-free-download.php] # Version: [3.0] # Tested on: [win7] php online chat suffer from xss in user panel - register as user - go to : http://path/phpchat/canned_opr.php - inject javascript evil code into messae filed demo : http://phponlinechat.com/phpchat/canned_opr.php have fun :) |