[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
XSS in scriptat support InverseFlow Help Desk v2.31
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: XSS in scriptat support InverseFlow Help Desk v2.31
- From: gamr-14@xxxxxxxxxxx
- Date: 22 Nov 2006 23:11:17 -0000
XSS in scriptat support InverseFlow Help Desk v2.31
::::::::::::::::::::::::::::::::::::::::::::::::::::::
Discovered : SwEET-DeViL & viP HaCkEr & HaCkEr sUn
Name scriptat: InverseFlow Help Desk v2.31
tame : AL-garnei
K-S-A
::::::::::::::::::::::::::::::::::::::::::::::::::::::
####################################################################
[1]
in ticketview.php
http://www.site.com/support_path/ticketview.php?id=[xss]
http://www.site.com/support_path/ticketview.php?email=[xss]
http://www.site.com/support_path/ticketview.php?cmd=deletepost&id=[xss]
http://www.site.com/support_path/ticketview.php?cmd=deletepost&email=[xss]
###################################################################
[2]
in ticket.php
http://www.site.com/support_path/ticket.php?email=[xss]
#################################################################
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Greetings to all our friends .. ;
SwEET-DeViL MiaL is gamr-14@xxxxxxxxxxx or m-0-t@xxxxxxxxxxx