Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
XSS flaw in MG2 Image Gallery (v.0.5.1) Jan 30 2006 08:48PM
preben watchcom no
Users can inject XSS into the form field "Name", when adding a comment on a picture. This will lead to the execution of XSS code.

Simple scripting like <script>alert('hello')</script> , and more advanced document.location, and document.cookie works.

This has been tested on version 0.5.1. Other ver...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus