TUCoPS :: Web :: CMS / Portals :: b06-2381.htm

Beoped Portal XSS
Beoped Portal XSS
Beoped Portal XSS



#Aria-Security.net Advisory=0D
#Discovered  by: O.u.t.l.a.w=0D
#< www.Aria-security.net >=0D 
#Gr33t to: A.u.r.a  & R@1D3N & Smok3r & DrtRp=0D
#-----------------------------------------------------------=0D
Software: BeoPed Portal=0D
Link And Online Demo : http://www.beoped.com/beoportal/index.php =0D 
Attack method: Cross Site Scripting=0D
=0D
=0D
Summary:=0D
BeoPortal is a service offering of Beoped Portal Solutions | Powered by Mambo Site Server =0D
=0D
=0D
Proof of Concept:=0D
There is no proof of concept , the remote user just needs to go to the index page and search for a script =0D
(( 

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH