fipsCMS light - vulnerable to script injection.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system.

If you inject the "headline" field with scriptingcode like <script>alert(?code executed?)</script>, this will automaticly launch when a users visits that site.

Please credit to: Preben Nyløkken

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux