Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:13063
HistoryJun 10, 2006 - 12:00 a.m.

phazizGuestbook v2.0 - XSS

2006-06-1000:00:00
vulners.com
5

phazizGuestbook v2.0

Homepage:
http://www.devhome.de/#english_version

Effected files:
input boxes of name, email, url, text.

XSS Vulnerability:
None of these input boxes sanatize user input before generating it. for PoC put <IMG
SRC=javascript:alert(&#00000XSS')> in any of the above boxes.