New Multiple Web Vulnerabilities {2014}

========================================================================================================================
My Exploit got leaked and went to the public after they changed the real finder , so this is just a proof.
========================================================================================================================

Exploit Found & Discovered By ; SPYN3T ~!




A Xss Vulnerability (:



Dork ; inurl:"cadastro.php?TipodeConta="
Vulnerability path :      /lembrar_senha.php
XSS Exploit {You can use another!} :    "></><h1>Xss Working!</h1>


Thank You,Wait for more (:



----------------------------------------------------------------------------------------------------------------------------------------

A Shell Uploading In the same script :

Dork ; inurl:"cadastro.php?TipodeConta="
Vulnerability path :      /cadastro.php

Exploit :
1-Sign Up with any crap information.
2-After sign in , Goto this path : /perfil.php
3-Enter the crap information again,And Upload a foto as 'shell.php'
4-Hit submit
5-View shell by location.
6-Enjoy ~!