[anonymous_bdc]

Deleted their products for sale, and added this on the only page that I could really edit.

Code

http://www.signwaves.co.uk/content/Print

🤝

[anonymous_bdc]

GG.

Next time try using XSS to deface it, like using the following codes as the name for the product, or the description.

Code

<script>window.location = "http://www.yourdefacepage.com"</script>

Or, if script tags are blocked:

Code

<meta http-equiv="refresh" content="0; url=http://www.yourdefacepage.com">

I tried using the <meta http-equiv="refresh" content="0; url=http://www.yourdefacepage.com"> code for a redirection deface, it didnt work. The site has a weird HTML editing program like PHPnuke used to have, it doesnt save stuff properly.

Ill try the <script>window.location = "http://www.yourdefacepage.com"</script> one now, theres a page called home / products. See if that works.

[orunu]

Well, it is, considering that XSS stands for Cross-Site-Scripting.

You are scripting between sites; therefore, XSS?

It's just persistent.

Correct me if I'm wrong,
- Envyy

i would say if your editing the page directly its just normal JS and all that if your doing it via comment/status box ect.. then its xss

[Project13]

scripting between sites bahahahaha, and Phizo is right, you can't deface with XSS, you can only redirect, unless you use XSS to get to the admin panel