Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Apps :: b06-3239.htm

Dating biz@ dating script v1.0 - XSS



Dating biz@ dating script v1.0 - XSS
Dating biz@ dating script v1.0 - XSS



Custom dating biz@ dating script v1.0=0D
=0D
Homepage:=0D
http://www.e-cbd.biz/php_dating_script.html=0D 
=0D
Affected files:=0D
=0D
*Profiles=0D
user_view.php=0D
photo_create.php=0D
---------------------------------=0D
=0D
The edit profile form can be spoofed and a user can enter any data he wishes and it will update his profile. The "Choose an opening like and Pople say you look like" input boxes are the only ones that when entered, will be reviewed by the sites admin. Max char limit stored in the db for each profile box appears to be 36 chars EXCEPT for the input box "Special Cases". This box is where I will =0D
=0D
display our XSS example with the cookie info.=0D
=0D
PoC:=0D
=0D
=0D
=0D
=0D
Screenshots:=0D
=0D
http://www.youfucktard.com/xsp/ebizdate1.jpg=0D 
http://www.youfucktard.com/xsp/ebizdate2.jpg=0D 
http://www.youfucktard.com/xsp/ebizdate3.jpg=0D 
=0D
-----------------------------------=0D
=0D
XSS vuln via user_view.php:=0D
=0D
http://www.example.com/user_view.php?u==0D 
=0D
----------------------------------=0D
=0D
XSS vuln on photo_create.php.=0D
=0D
Max char limit stored in db is only 32, but data isn't sanatized.=0D
=0D
---------------------------------


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH