[gaccount]

Hey guys now this time i found a vulnerability in http://www.ehackingnews.com/

here is the proof:

http://www.ehackingnews.com/2012/01/refl...ty-in.html




REPORTED

[Dagnow]

Wtf is this :/ Always message ttt. I hate that

[gaccount]

Wtf is this :/ Always message ttt. I hate that

What happened dude, Don't you like this !!

[dwd]

congratulation keep going try to get the root :)

[gaccount]

he probably doesnt know what xss is... 😕

but nice find man :)

was it simply <script>alert('XSS');</script> or did you have to use some "tricks" ? :D

It was not not <script>alert("XSS")</script> it was something else....:)

[agentannon]

Nice find, XSS has always been hard for me.

[gaccount]

Nice find, XSS has always been hard for me.

Previously it was hard for me also but i tried my level best and now you can see the results !!

[zer0pwn]

I found this yesterday, it's patched.
But the vector is:

<img src=1 onerror=alert(1);>

[Acunetix]

nice find men keep it up

and try to have another better like this

[gaccount]

I found this yesterday, it's patched.
But the vector is:

<img src=1 onerror=alert(1);>

I have not used this vector and when i informed the owner he patched it that time only..:)

---

nice find men keep it up

and try to have another better like this

Thanks and sure i will try my level best !! 🤗

[worldblackstar]

<img src=1 onerror=alert(1);> This code also worked. The vulnerability allows html tags to execute.

[gaccount]

<img src=1 onerror=alert(1);> This code also worked. The vulnerability allows html tags to execute.

Maybe because the vulnerability has been patched....