TUCoPS :: HP Unsorted E

TUCoPS :: HP Unsorted E :: bx3797.htm
Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani

Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani


----------------------------------------------------------------

Script : Easybookmarker 40tr

Type : Xss Vulnerability

Method : POST

Alert : High

----------------------------------------------------------------

Discovered by : Khashayar Fereidani a.k.a. Dr.Crash

My Offical Website : HTTP://FEREIDANI.IR 

Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t] com

----------------------------------------------------------------

Khashayar Fereidani Offical Website : HTTP://FEREIDANI.IR 

----------------------------------------------------------------

Script Download : http://myiosoft.com/download/EasyBookMarker/easybookmarker-40tr.zip 

----------------------------------------------------------------
Xss Vulnerability :

Variable : rs
Send Method : POST

Set rs variable with post method in ajaxp_backend.php :  for test vulnerability





action="http://example/zomplog/ajaxp_backend.php" 

method="POST" name="form">







----------------------------------------------------------------

                        Tnx : God

HTTP://IRCRASH.COM 

----------------------------------------------------------------