|
Uapplication Ublog Reload Trackback.ASP Cross-Site Scripting Vulnerability
No exploit is required. The following proof of concept URI are available: http://www.example.com/UblogReload/trackback.asp?bi=[id]&btitle=[XSS]&mode=view http://www.example.com/UblogReload/trackback.asp?bi=343&btitle=<script>alert('document.cookie')</script>&mode=view |
|
|
Privacy Statement |