Bugtraq mailing list archives

Toms Gstebuch 1.00 - XSS

From: cod3in () gmail com
Date: 1 Sep 2007 12:27:29 -0000

Software: Guestbook
Title: Toms Gästebuch 1.00
Version: 1.0
Type: XSS
Date: Sat Aug 11 21:52:08 CEST 2007
Vendor: Fitz Thomas
Page: http://www.toms-seiten.at/

vulnerability:
----------------------------
http://example.com/form.php?action=show&homepage=[XSS]&mail=[XSS]&name=[XSS]
http://example.com/admin/header.php?language=[XSS]&anzeigebreite=[XSS]
http://example.com/install.php?msg=[XSS]

The vendor has been informed.

Current thread:

Toms Gstebuch 1.00 - XSS cod3in (Sep 01)
- <Possible follow-ups>
- Re: Toms Gstebuch 1.00 - XSS administrator (Sep 07)
- Re: Re: Toms Gstebuch 1.00 - XSS hd1979 (Sep 08)
- Re: Re: Re: Toms Gstebuch 1.00 - XSS administrator (Sep 19)