Bugtraq mailing list archives

CuteNews 1.3.6 XSS

From: emulamex () hotmail com
Date: 1 Dec 2006 20:56:34 -0000

PHP Script: CuteNews 1.3.6
Class: XSS
Website: http://cutephp.com/cutenews
Found by: Detefix
dork: inurl:cutenews

-----

- Vulnerable Code:

<td align=center colspan=4 style='text-align:left;'>$result</td>

-----

- Exploit:

http://[target]/[path-to-cutenews]/?result=[XSS]

Current thread:

CuteNews 1.3.6 XSS emulamex (Dec 02)