Home page logo
/

bugtraq logo Bugtraq mailing list archives

ApPHP Calendar XSS - CSRF
From: edgard.chammas () balamand edu lb
Date: Tue, 31 Aug 2010 14:13:32 -0600

##############################################################
# Vendor: ApPHP
# Affected versions: All
# Script: ApPHP Calendar
# URL: http://www.apphp.com/php-calendar/index.php
# Vulnerability type: XSS - CSRF
# Risk rating: Medium
##############################################################
# [Exploit]
# Attack: XSS - CSRF in calendar.php via POST
# Vulnerable file: calendar.class.php
# Vulnerable parameters: 
# - category_name
# - category_description
# - event_name
# - event_description
###############################################################
# [Solution]
# Need to sanitize the vulnerable parameters
###############################################################
# [Credits]
# Edgard Chammas [454447415244]
# edgard.chammas () balamand edu lb
###############################################################


  By Date           By Thread  

Current thread:
  • ApPHP Calendar XSS - CSRF edgard . chammas (Aug 31)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]