================================================================================
# Mihalism Multi Host v5.0.3 Xss-Csrf
================================================================================
# Vendor Homepage: www.mihalism.net
# Date: 10/02/2016
# Version : v5.0.3
# Author: Ashiyane Digital Security Team
# Contact: hehsan979@gmail.com
# Source: http://ehsansec.ir/advisories/multihoster-xss-xsrf.txt
================================================================================
# Reflected Cross Site Scripting:
http://localhost/viewer.php?file=
http://localhost/download.php?file=
# Reflected Cross Site Scripting:
# Stored Cross Site Scripting:
Now See :
http://localhost/admin.php?act=site_settings
http://localhost/
and some other pages.
# Cross Site Request Forgery (Change Site Settings):
# Cross Site Request Forgery (Change Admin Password and Mail)
# Demo for Stored Cross Site Scripting:
http://8pic.ir/
================================================================================
# Discovered By : Ehsan Hosseini (EhsanSec.ir)
# Thanks to one of my best friend Milad Hacking (FullSecurity.org)
================================================================================