Bugtraq mailing list archives

[Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN


From: Advisory () Aria-Security Net, "[ NO REPLY ]"@securityfocus.com
Date: 4 Oct 2007 20:18:54 -0000

Aria-Security Team 
----------------------
Vendor:
http://stuffedguys.com/

POC:
http://target/path/admin/campaign_link.html?GenCode=1&CampId=1&SplitId=&GLink=XSS
http://target/PATH/actions.html?CpId=1&SiteId=1&Mode=new&EditId=[XSS]

Credits Goes To Aria-Security Team
Regards,
The-0utl4w
http://Aria-Security.Net [Aria-Security's Website]


Current thread: