Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Tyger Bug Tracking System Multiple Vulnerability

WordPress source code compromised to enable remote code execution

Remote File Include In DBImageGallery

From:	sn0oPy.team_(at)_gmail.com <sn0oPy.team_(at)_gmail.com>
Date:	03.03.2007
Subject:	BJ Webring XSS

* BJ Webring XSS

* By : sn0oPy

* Risk : high



* exploit :

just inject any script on the add link menu : http://www.target.ma/webring/formulaire.php

Dork :

intitle:".: index webring :."


* contact : sn0oPy@avenir-geopolitique.net

* greetz : [subzero], http://forums.avenir-geopolitique.net.

reference : http://forums.avenir-geopolitique.net/viewtopic.php?t=2707