|
Gallarific Cross Site Scripting and Authentication Bypass Vulnerabilities
An attacker can exploit these issues through a browser. To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting victim into following a malicious URI. The following proof-of-concept URIs are available: http://www.example.com/gadmin/gallery.php?task=delete&id=1 http://www.example.com/gadmin/gallery.php?task=edit&id=1 The following examples and exploit are also available: |
|
|
Privacy Statement |