insight.ly suffers from a cross site scripting vulnerability.
7ccce86db3bea6965352f61c8695bcf45a7677abaa9756f4f9de035bd34465c9# Author:Provensec
# Vendor: insight.ly
# Vulnerability Type:persistent xss
# Discription: Integrated online customer relationship management (CRM)
and project management makes sure you are on top of critical business
processes.
# Exploit:
1 Goto add contacts
2 Fill the work address field with xss payload http://prntscr.com/4p657g
3 Save it and javascript will execute
http://prntscr.com/4p65bk
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed