Description
GuestBookPlus - HTML Injection Bypass Comments Limit
{"lastseen": "2020-04-01T19:04:18", "references": [], "description": "\nGuestBookPlus - HTML Injection Bypass Comments Limit", "edition": 1, "reporter": "MiND C0re", "exploitpack": {"type": "webapps", "platform": "php"}, "published": "2010-08-29T00:00:00", "title": "GuestBookPlus - HTML Injection Bypass Comments Limit", "type": "exploitpack", "enchantments": {"dependencies": {}, "score": {"value": 0.4, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.4}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2010-08-29T00:00:00", "id": "EXPLOITPACK:A0E3E3C45818FB222521F3154D44D999", "href": "", "viewCount": 3, "sourceData": "=======================================================================\n# In the name of ALLAH ! #\n=======================================================================\n# GuestBookPlus Script PHP (HTML Injection) Vuln.\n=======================================================================\n=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n#################################\n# _____ __ __ /_ __/ #\n# / ___/ \\ \\ / / / / #\n# (__ ) \\ \\/ / / / #\n# /____/ \\__/ /_/ #\n#################################\n########################################################################\n# Name: GuestBookPlus Script PHP (HTML Injection) \n# Vendor: http://websitekit.us/GBP_demo.html\n# Date: 2010-08-15\n# Author: MiND\n# Greets: Sa-ViRuS.CoM , RENO , Dr.php , ! BaD BoY ! , Gov.HaCker , Anti-Secure , Dr.$audi all Sa-ViRuS.CoM Members ..\n# Contact: f1_1nnym1nd@HoTMaiL.CoM\n# Home: WwW.Sa-ViRuS.CoM\n########################################################################\n\n[~]Note : Its not free ,, Its by 28 $\n[~]You Can Buy It From : http://websitekit.us/guest_book_plus.html\n\n\n\n[~] HTML Injection Vuln . : Add a new comment using sign button\nPut on the name & body of your comment any html code like: \n<meta http-equiv=\"refresh\" content=\"0;url=http://sa-virus.com/\" /> <==== ( thats redirecting to sa-virus.com ) \n\n[~] Another note : You can bypass the limit of comments per day in this guestbook script \nBy deleting the saved cookie in your computer ;)", "cvss": {"score": 0.0, "vector": "NONE"}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645618250}}
{}