bugtraq - XSS in script Mobile

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 3 Nov 2006 15:15:47 -0000
From: m-0-t@...mail.com
To: bugtraq@...urityfocus.com
Subject: XSS in script Mobile

Discovered : SwEET-DeViL  & HaCkEr sUn 
Product:  http://www.ac4p.com
tame : AL-garnei

::::::::::::::::::::::::::::::::::::::::::#######
/1/

index.php  


http://www.site.com/path/index.php?Bloks={XSS}
 

http://www.site.com/path/index.php?Newnews={XSS}


http://www.site.com/path/index.php?lBlok={XSS}


http://www.site.com/path/index.php?foooot={XSS}
#########################################################
/2/

 MobileNews.php

http://www.site.com/path/MobileNews.php?Newnews={XSS}

http://www.site.com/path/MobileNews.php?newmsgs={XSS}

http://www.site.com/path/MobileNews.php?Bloks={XSS}
##########################################################
/3/

 polls.php 


http://www.site.com/path/polls.php?Newnews={XSS}
#######################################################
/4/

 send.php 

http://www.site.com/path/send.php?cats={XSS}

##########################################################
/5/

 up.php 

http://www.site.com/path/up.php?footer={XSS}

##########################################################
/6/

file cp in index.php

http://www.site.com/path/cp/index.php?pagenav={XSS}
##########################################################
Greetings and thanks to all of our friends conductive 
vip hacker and electronic