Bugtraq mailing list archives
Re: Advanced Guestbook
From: Spy Hat <spyhat () spyhat com>
Date: 6 Dec 2004 06:30:15 -0000
In-Reply-To: <8ea2ac2004120211406650777b () mail gmail com> The previous version of Advance Guestbook (2.2) also vulnerable to XSS yours, SpyHat
Received: (qmail 10259 invoked from network); 3 Dec 2004 06:52:14 -0000 Received: from outgoing.securityfocus.com (HELO outgoing2.securityfocus.com) (205.206.231.26) by mail.securityfocus.com with SMTP; 3 Dec 2004 06:52:14 -0000 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing2.securityfocus.com (Postfix) with QMQP id B9461150062; Thu, 2 Dec 2004 13:35:23 -0700 (MST) Mailing-List: contact bugtraq-help () securityfocus com; run by ezmlm Precedence: bulk List-Id: <bugtraq.list-id.securityfocus.com> List-Post: <mailto:bugtraq () securityfocus com> List-Help: <mailto:bugtraq-help () securityfocus com> List-Unsubscribe: <mailto:bugtraq-unsubscribe () securityfocus com> List-Subscribe: <mailto:bugtraq-subscribe () securityfocus com> Delivered-To: mailing list bugtraq () securityfocus com Delivered-To: moderator for bugtraq () securityfocus com Received: (qmail 32371 invoked from network); 2 Dec 2004 12:38:25 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; b=ZzuHyFaU5dWXZZZ6ks4DM8A7YxZdqOaW+R9+TGOJeGPg3nc7gK0eeTRqw3kIfp+WNs8gSpgvnDrdU+favNNKH8oxl/NKuuS4N2L96onsg9TbDzXZmnQSCmKbQxnOWLhv5EiLUStZIX5ZO+kq6QpKnftsFB76e1mqe12VGww+MEE= Message-ID: <8ea2ac2004120211406650777b () mail gmail com> Date: Thu, 2 Dec 2004 20:40:21 +0100 From: Emile van Elen <emile.van.elen () gmail com> Reply-To: Emile van Elen <emile.van.elen () gmail com> To: bugtraq () securityfocus com Subject: Advanced Guestbook Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit There's a XSS in Advanced Guestbook 2.3.1 For example: index.php?entry=<script>alert(document.cookie)</script> greetings, -- Emile van Elen
Current thread:
- Advanced Guestbook Emile van Elen (Dec 02)
- <Possible follow-ups>
- Re: Advanced Guestbook Spy Hat (Dec 06)