exploit the possibilities

Am4ss 1.2 Cross Site Scripting

Am4ss 1.2 Cross Site Scripting
Posted Aug 3, 2012
Authored by s3n4t00r

Am4ss versions 1.2 and below suffer from reflective and persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
MD5 | 92c04e96b435bd6bf1f9e4af4177a007

Am4ss 1.2 Cross Site Scripting

Change Mirror Download
###########################################
# Exploit Title : am4ss 1.2 <= Multiple Vulnerabilities
# Author : s3n4t00r
# Home : Sec-w.com
# Version : all version
# Date : Jul 31, 2012
############################################

XSS Stored [1]

1- Register

2 - Login here [ http://localhost/am4ss/orderdev.php?step=2 ]

3- Create Ticket and add your code html or js

4- Show Tickets [ http://localhost/exp/am4ss/tickets.php ]


XSS Stored [2]

1- Register

2 - Login here [ http://localhost/am4ss/hosting.php?do=order&planid=1&step=6 ]

3- Create Ticket and Change data [ domaine ] using Tamper Data

4- Show Tickets [ http://localhost/exp/am4ss/tickets.php ]




XSS reflected [1]

here : [ http://localhost/exp/am4ss/misc.php?do=deletemail&mail=(XSS) ]

Example http://localhost/exp/am4ss/misc.php?do=deletemail&mail="><script>alert('Sec-w.com')</script>



=================================================

Gr34ts 4 : Sec-w.com Members

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

September 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    1 Files
  • 2
    Sep 2nd
    38 Files
  • 3
    Sep 3rd
    30 Files
  • 4
    Sep 4th
    15 Files
  • 5
    Sep 5th
    12 Files
  • 6
    Sep 6th
    17 Files
  • 7
    Sep 7th
    3 Files
  • 8
    Sep 8th
    1 Files
  • 9
    Sep 9th
    24 Files
  • 10
    Sep 10th
    22 Files
  • 11
    Sep 11th
    22 Files
  • 12
    Sep 12th
    15 Files
  • 13
    Sep 13th
    5 Files
  • 14
    Sep 14th
    2 Files
  • 15
    Sep 15th
    1 Files
  • 16
    Sep 16th
    11 Files
  • 17
    Sep 17th
    16 Files
  • 18
    Sep 18th
    8 Files
  • 19
    Sep 19th
    12 Files
  • 20
    Sep 20th
    0 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close