Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
iFoto v0.20-06/06/06 Jun 08 2006 09:31PM
luny youfucktard com
iFoto v0.20-06/06/06

Homepage:

http://ifoto.ireans.com/

Effected files:

XSS Vulnerability:

The dir path to show the image is base 64 encoded, so to attempt this XSS example we encode our codein base64.

The code we'll be using is javascript in an iframe tag. [IFRAME SRC="javascript:al...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus