Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:20649
HistoryOct 03, 2008 - 12:00 a.m.

HostAdmin Cross-Site Scripting Vulnerabilities

2008-10-0300:00:00
vulners.com
16

Dear securityfocus moderator,
a bug in HostAdmin that allows to us to occur a Cross-Site Scripting on a
Remote machin.
this bug tested with the Vulnerable Software 3.1.1.
bug found in the attached document.

###############################################################################

Islamic Republic Of Iran Security Team

Www.IrIsT.Ir

###############################################################################

HostAdmin <== 3.1.1 Cross-Site Scripting Vulnerabilities

Download…: http://dreamcost.com/?page=hostadmin

Bug Found…: IrIsT™

discovery…: Am!r (IrIsT™)

contact…: Admin[at]IrIsT.ir

Exploit…: http://[site]/[path]/index.php?page=[XSS]

Google Search.: "Powered By HostAdmin"

SP TNX…: Dr.Flag

###############################################################################