Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:14415
HistorySep 26, 2006 - 12:00 a.m.

PhotoStore Multiple Cross-Site Scripting Vulnerabilities

2006-09-2600:00:00
vulners.com
20

#################################################
PhotoStore Multiple Cross-Site Scripting Vulnerabilities

site : http://www.ktools.net/photostore/

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Exploite :

http://www.example.net/[path]/details.php?gid=[xss]
http://www.example.net/[path]/view_photog.php?photogid=[xss]

Discoverd by :
meto5757 of rootshell security group

greets :
Ironfist , sverde1 , Dr.Viru$ , craziest (miss u!)
& all my friends :)