Bugtraq mailing list archives
Re: chicomas <=2.0.4 Multiple Vulnerabilities
From: security curmudgeon <jericho () attrition org>
Date: Sat, 20 Dec 2008 20:55:01 +0000 (UTC)
On Sat, 20 Dec 2008, admin () bugreport ir wrote: : +-->Cross Site Scripting (XSS). Reflected XSS attack in "index.php" in "q" : parameter. : : POC: : http://[URL]/chicomas/index.php?q="<script>alert(/www.BugReport.ir/.source)</script> This was disclosed on May 5th [1] by Hadi Kiamarsi and was assigned BID 29025 / CVE-2008-2186 / OSVDB 44809. - jericho [1] http://marc.info/?l=bugtraq&m=120975560407192&w=2
Current thread:
- chicomas <=2.0.4 Multiple Vulnerabilities admin (Dec 20)
- Re: chicomas <=2.0.4 Multiple Vulnerabilities security curmudgeon (Dec 20)