Lucene search
K

Mouse Media Script 1.6 Cross Site Scripting

🗓️ 13 Nov 2014 00:00:00Reported by Halil DalabasmazType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 31 Views

Mouse Media Script v1.6 Stored XSS Vulnerability in Title/Description Input

Code
`# Exploit Title: Mouse Media Script Stored XSS Vulnerability  
# Google Dork: "is your best source of fun." inurl:/view/popular  
# Date: 04-10-2014  
# Exploit Author: Halil Dalabasmaz  
# Version: v1.6  
# Software Link: http://codecanyon.net/item/mouse-media-script/7773254  
# Software Test Link: http://media.nisgeo.com  
# Tested on: Kali Linux & Iceweasel 31.2.0  
# Sample Payload: "><script>alert(document.cookie);</script>  
  
# Attack Description: Login to system and upload any of your image. When  
uploading the image you need to enter the XSS payload to "Title" or  
"Description" inputs. And then you can visit thıs home page to check the  
uploaded payload. All these uploaded image and payload were completed  
succesfully then all visitors and logged users will be affected by this  
vulnerability.  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation