BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
XSS in 212cafeBoard ( Verision 0.08 & 6.30 Beta ) Jan 21 2007 01:01AM
xx_hack_xx_2004 hotmail com
Hello

Vulnerable : 212cafeBoard
Version: 0.08 Beta
6.30 Beta
Web : http://www.212cafe.com

i found XSS 212cafeBoard v6.30 Beta :

http://www.example.com/Board/list3.php?user=[XSS]

For Example , you can put :
http://www.example.com/board/list3.php?user='><script>alert(document.coo
kie);<...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus