Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2009-2890

Description

Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter.

POC

Reference

- http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt

Github

- https://github.com/1karu32s/dagda_offline

- https://github.com/MrE-Fog/dagda

- https://github.com/bharatsunny/dagda

- https://github.com/dbeltran24/Dagda

- https://github.com/eliasgranderubio/dagda

- https://github.com/man151098/dagda