BugTraq
Back to list
|
Post reply
[Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability
Jun 09 2006 05:58PM
mac68k gmail com
Title:
[Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability
Author:
Kil13r - http://www.kil13r.info/
Local / Remote:
Remote
Timeline:
2006/06/09 - Discovery
2006/06/09 - Vendor notification
2006/06/09 - Release
Affected version:
Not affected version:
Description:
DreamWiz is internet portal site, but that has vulnerability.
It can run arbitrary Javascript code by end user in search engine.
If victim execute arbitrary Javascript code, attacker can steal victim's cookie.
Proof of Concept code:
None
Proof of Concept example:
None
Proof of Concept screenshot:
http://www.kil13r.info/sa/xss/dreamwizxss.jpg
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
[Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability
Author:
Kil13r - http://www.kil13r.info/
Local / Remote:
Remote
Timeline:
2006/06/09 - Discovery
2006/06/09 - Vendor notification
2006/06/09 - Release
Affected version:
Not affected version:
Description:
DreamWiz is internet portal site, but that has vulnerability.
It can run arbitrary Javascript code by end user in search engine.
If victim execute arbitrary Javascript code, attacker can steal victim's cookie.
Proof of Concept code:
None
Proof of Concept example:
None
Proof of Concept screenshot:
http://www.kil13r.info/sa/xss/dreamwizxss.jpg
[ reply ]