Rapidleech v2 rev. 43 XSS Vulnerability

# Exploit Title: Deface By XSS In RapidLeech
# Google Dork: inurl:"index.php?debug=1" or intitle:"Rapidleech v2 rev. 43"
# Date: 2011/20/December
# Author: M.R.S.CO - Ashiyane.org
# Software Link: http://dl.p30vel.ir/RapidLeech-pre_release-for_v43-Rev_397.zip
# Version: v2 rev. 43
# Tested on: WINDOWS - LINUX
# E-Mail : [email protected]
Powered By M.R.S.CO

sample Address : http://appvn.org/notes.php
go to this address : http://site.com/notes.php
Enter In TextBox </textarea><SCRIPT>alert(/M.R.S.CO XSS/)</SCRIPT> FOR TEST XSS AND SAVE

FOR DEFACE ENTER THIS CODE SAMPLE :
And save - This Time Defaced


Greetz : Behrooz_Ice - Q7X - Sha2ow - Virangar - Azazel - eychenz .iman_taktaz - keivan - Ali_Eagle - ERrOR - taghva - M3QD4D - PrinceofHacking - elvator - uniq2world - Gladiator - runi3r - Hijacker - n3me3iz - A.S.P.I.R.I.N - HASSAN20. AR455. r3d.z0nE. Zend. Classic. HIDEEN-HUNTER - *Alexander* - darkc0d3r - Milad-Bushehr - Rz04 - Pr0grammer - X-HIDDEN-X - BLACK - Azad™ - am118 - angola - B3HR0Z - hashor - jooooondost - Kaz3m - megacpu - MostafaBestMan - Mute - OMID_3rver - Sil3ntDi3. The Smith - v!t0n M.R.S.CO - N4H - satanic2000 - _Milad22_ - unline - MR.CICILI 



#  0day.today [2018-03-20]  #