Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA19589] Debian mnogosearch Insecure Password Storage Security Issue

[SA19601] dnGuestbook admin.php SQL Injection Vulnerability

[SA19563] MAXdev MD-Pro ADOdb "server. php" Insecure Test Script Security Issue

[Full-disclosure] JetPhoto Multiple Cross-Site Scripting Vulnerabilitie

From:	sn4k3.23_(at)_gmail.com <sn4k3.23_(at)_gmail.com>
Date:	11.04.2006
Subject:	Confixx 3.1.2 <= Cross Site Scripting Vuln

// Confixx 3.1.2 <= Cross Site Scripting Vuln //

-----------------------------------------------------------------

[~] Advistory by: LoK-Crew ~ Snake_23


[-] Exploit: http://www.victim.com/allgemein_transfer.php?monat=4&jahr=[XSS]

[-] Googledork: -

[+] Greetz to: Bluegeek and Team.Rootbox
[+] Visit: www.LoK-Crew.de.am