Quantcast
Channel: BOT24
Viewing all articles
Browse latest Browse all 8064

phpVibe 3.1 Persistent XSS Vulnerability

$
0
0

##########################################
# Exploit Title: phpVibe 3.1 Persistent XSS Vulnerability
# Date: 2013-02-09
# Author: DaOne aka Mocking Bird
# Software Link: http://phprevolution.com/
# Category: webapps/php
# Version: 3.1
# Price: 40€
# Google dork: "Powered by phpVibe v3.1"
##########################################

-How to Exploit-
you must register -> http://site.com/register.php
then go to edit your profile -> http://site.com/edit-profile.php
put xss code in [Real Name]or[Display Name] field
will see your script code in members list -> http://site.com/members/


Thanks to: Yassen Elgwell





//The information contained within this publication is
//supplied "as-is"with no warranties or guarantees of fitness
//of use or otherwise. Bot24, Inc nor Bradley Sean Susser accepts
//responsibility for any damage caused by the use or misuse of
//this information

Viewing all articles
Browse latest Browse all 8064

Trending Articles