STORED XSS AFTER EFFECTS|WEAK PASSWORD POLICY|ADMIN BYPASSED

[653]

This can be said as Weak Password Policy and is listed in the OWASP Top 10

Site:

Hidden Content

You must register or login to view this content.

Did a Stored XSS Went Well
So you can see the username and password in the screen itself
Go Have Fun
Btw you can only upload jpg,jpeg
No option to upload a php shell
Either try for the exif data via image or the modified name shit

Note: Only for educational purpose

Telegram: https://t.me/candycainlobbies
Ad by brocain

[67]

Thanks for the share, will use this for future contribs.

[6]

thanks

[38]

Thank

[744]

Yo. Is this exploited by you?

[41]

exploited by you?

[61]

Thabjks

[219]

TYYYY