Beach Bash! - [June 1st - July 1st]

yoounisyaser · June 2018

XBERR2X wrote: »

Nice amount of crates !

Yes Of Course

LeRewind · June 2018

Where is EP in crossfire please?

_BeDo · June 2018

Nice event

manuelcrivas · June 2018

I played all day and I did not get any EP ... crates..... ::mad:

zoroegypt1 · June 2018

Many crates but stupid rifles :DDD ,, good one anyways

Ma8wryOnly2 · June 2018

very good event its great nice jop

luisateAmoO · June 2018

nice event as usual!

d1SSENT · June 2018

i think there is a problem in EP receiver 'couse i didn't get 1 point since last 2 days

d1SSENT · June 2018

shabasy wrote: »

that is totally awesome and so freaking worth it, that AK is a badass

it's not an AK bud, it's Norinco Type and btw it's suck AF too LMAO

shabasy · June 2018

d1SSENT wrote: »

it's not an AK bud, it's Norinco Type and btw it's suck AF too LMAO

OMG seriously , i was so hyped , now u killed my spirit , tnx for the info tho

01123014057 · June 2018

jkjjjjjjl';'

hfjgfjgbj · June 2018

why stop crossfire

kiro112 · June 2018

Skyonly wrote: »

[h=2]norinco type56-hawaiian[/h]

I thaught so .. but there was a guy saying its an AK !

a7mednaser · June 2018

i play alot of time and i dont receive any ep

elkafer147 · June 2018

Hahaha i won from 1 crate thx gm

dLodaEASDZX · June 2018

great job Gm I will do my best to get rewarded LiittleBad

Epic3 · June 2018

nice event thx

123ASSA · June 2018

# Exploit Title: Joomla! extension EkRishta 2.10 - Persistent Cross-Site Scripting / SQL Injection # Dork: N/A # Date: 2018-05-18 # Exploit Author: Sina Kheirkhah || (Sina.For.Sec@gmail.com) # Software Link: https://extensions.joomla.org/extensions/extension/living/dating-a-relationships/ek-rishta/ # Vendor Homepage: https://www.joomlaextensions.co.in/ # Version: 2.10 # Category: Webapps # CVE: N/A # # # #POC-1) Cross site scripting (XSS) : # # # Description: # # 1)create a profile # 2)you can use your payload in profile info page # 3)for example in Address field you can use "> # 4)now the Payload will be executed whenever someone visits your profile # # # POC-2) SQL Injection: # # Description: # 1)the website has filtered all the inputs for sql injection BUT # you can use the user_setting page in order to Inject SQL code # by using POST method # http://localhost/ekrishta/index.php/profile/user_setting # # # # # # ا