Infinity Market Classified Ads Script version 1.6.2 suffers from a cross site scripting vulnerability.
====================================================================================================================================
| # Title : Infinity Market Classified Ads Script 1.6.2 xss via file uploads Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) |
| # Vendor : https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?s_rank=1520 |
| # Dork : "InfinityMarket MultiPurpose Script is a multi-solution product made with simplicity in mind so you can benefit " |
====================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine .
[+] singup your user & go to /index.php/frontend/myprofile/en#content
[+] choose your file svg and upload it .
[+] http://127.0.0.1/www/harajalshamcom/files/index.svg
Greetings to :========================================================================================================================
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * djroot.dz * LiquidWorm* Hussin-X *D4NB4R * shadow_00715 * yasMouh |
=======================================================================================================================================
