==================================================================================================================================== | # Title : Infinity Market Classified Ads Script 1.6.2 xss via file uploads Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Français V.(Pro) | | # Vendor : https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?s_rank=1520 | | # Dork : "InfinityMarket MultiPurpose Script is a multi-solution product made with simplicity in mind so you can benefit " | ==================================================================================================================================== poc : [+] Dorking İn Google Or Other Search Enggine . [+] singup your user & go to /index.php/frontend/myprofile/en#content [+] choose your file svg and upload it . [+] http://127.0.0.1/www/harajalshamcom/files/index.svg Greetings to :======================================================================================================================== jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh | =======================================================================================================================================