# Exploit Title: CLiki Cross Site Scripting
# Date: 8.02.2012
# Author: Sony
# Software Link: http://www.cliki.net
# Web Browser : Mozilla Firefox
# Blog : http://st2tea.blogspot.com
# PoC:
http://st2tea.blogspot.com/2012/02/cliki-cross-site-scripting.html
..................................................................
http://en.wikipedia.org/wiki/CLiki
Simple persistent xss.
Create New Page and put xss code and save this.
And you can see xss on the page.
Also we can see our xss on the "Recent Changes" Page.
http://www.cliki.net/Recent%20Changes
http://2.bp.blogspot.com/-bVPzmm6YAlY/TzKyybsoNMI/AAAAAAAAAcc/9GXowU-nf8w/s1600/12.JPG
..................................................................
InSecurity.Ro
Because we care, we're security aware!
