| # Title : Syria2u You Shop v1.0 Mullti Vulnerability
| # Author : indoushka
| # email : indoushka4ever@gmail.com
| # Dork : سكربت يوشــوب للتسوق عبر الانترنت , قم باختيار المدينة ثم تمتع بالتسوق في مدينتك من أي مكان
| # Tested on: win8.1 Fr V.(Pro) 15:39 * 23/05/2015
| # Bug : Mullti
| # Download : http://www.syria2u.com/
=======================================
HTML form without CSRF protection :
http://127.0.0.1/YouShop/Admin/system/addImage.php
http://127.0.0.1/YouShop/Admin/system/addVideo.php
http://127.0.0.1/YouShop/Admin/system/cckAddEdit.php
Directory listing :
http://127.0.0.1/YouShop/admin/editor/
http://127.0.0.1/YouShop/files/
http://127.0.0.1/YouShop/admin/cck/
http://127.0.0.1/YouShop/admin/system/
XSS - jQuery v1.8.0 EXploits :
XSS - jQuery v1.8.0
Add Admin :
http://127.0.0.1/YouShop/install/index.php?install=3
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz :
Exploit-db Team :
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * www.sa-hacker.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
---------------------------------------------------------------------------------------------------------------