PhpOnlineChat version 3.0 suffers from a cross site scripting vulnerability.
34b5c7474073bfe72f4e68f24bab9bb78a3eba9020c7888f0e0f5b65d3e0898c# Exploit Title: [phponlinechat xss ]
# Date: [5/9/2014]
# Exploit Author: [N0 Feel]
# Vendor Homepage: [http://phponlinechat.com/phpchat]
# Software Link: [http://phponlinechat.com/chat-free-download.php]
# Version: [3.0]
# Tested on: [win7]
php online chat suffer from xss in user panel
- register as user
- go to : http://path/phpchat/canned_opr.php
- inject javascript evil code into messae filed
demo :
http://phponlinechat.com/phpchat/canned_opr.php
have fun :)
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed