VHCS --- Virtual Hosting Control System Cross Site Scripting

2006-05-0200:00:00

vulners.com

#----------------------------------------------------------
#Aria-Security.net Advisory
#Discovered by: O.U.T.L.A.W
#< www.Aria-security.net>
#Gr33t to: A.u.r.a & R@1D3N & Smok3r
#-----------------------------------------------------------
Software: VHCS
Link: http://www.vhcs.net
Attack method: Cross Site Scripting
advisory:http://www.aria-security.net/hm/vhcs.txt

Summary:
vhcs is a powerfull Hosting Managment

Proof of Concept:
Admin Require

    [target]/admin/server_day_stats.php?year=2006&amp;month=05&amp;day=2[xss]
    [target]/admin/server_day_stats.php?year=2006&amp;month=05[xss]&amp;day=2
    [target]/admin/server_day_stats.php?year=2006[xss]&amp;month=05&amp;day=2

Solution
contact me: [email protected]

JSON