TUCoPS :: HP Unsorted A

TUCoPS :: HP Unsorted A :: va1667.htm
Aria-Security.com: Saba 2.0 Cross Site Scripting

Aria-Security.com: Saba 2.0 Cross Site Scripting Aria-Security.com: Saba 2.0 Cross Site Scripting


Saba 2.0 Cross Site Scripting (JS Injection)
http://Aria-Security.com 
---------------------------------------------------------------
Saba 2.0 is a Persian Forum Script 
Dork: Powered by Saba 2.0
Vulnerable file: usercp.php

usercp.php?username=YourUserName

The above script can be inserted as Location, Yahoo ID and other fields in the usercp page.. 

 


The-0utl4w
Aria-Security Team