lists.openwall.net   lists  /  announce  john-users  owl-users  popa3d-users  /  xvendor  oss-security  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4 
Open Source and information security mailing list archives
 
This website is powered by Openwall GNU/*/Linux security-enhanced OS
[<prev] [next>] [month] [year] [list] 
Date: 1 Sep 2007 12:27:29 -0000
From: cod3in@...il.com
To: bugtraq@...urityfocus.com
Subject: Toms Gstebuch 1.00 - XSS

Software: Guestbook
Title: Toms Gästebuch 1.00
Version: 1.0
Type: XSS
Date: Sat Aug 11 21:52:08 CEST 2007
Vendor: Fitz Thomas
Page: http://www.toms-seiten.at/

vulnerability:
----------------------------
http://example.com/form.php?action=show&homepage=[XSS]&mail=[XSS]&name=[XSS]
http://example.com/admin/header.php?language=[XSS]&anzeigebreite=[XSS]
http://example.com/install.php?msg=[XSS]

The vendor has been informed.

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux