TUCoPS :: Web :: Specific Sites

TUCoPS :: Web :: Specific Sites :: b06-2279.htm
Gawab.com Register Xss Bugtraq

Gawab.com Register Xss Bugtraq Gawab.com Register Xss Bugtraq


Script: Gawab.com Mail Services Portal System=0D
=0D
Version: ?=0D
=0D
Language: PHP=0D
=0D
Problem: Xss=0D
=0D
Vendor: http://www.HackMaster.Us=0D 
=0D
Discovered by: rootter(at)hackmaster(dot)us=0D
=0D
Example: http://gawab.com/webfront/register.php?formAction=start&newDomain=i%20found%20a%20xss%20vuln.%20%20%3Cscript%3Ealert(%22Security%20testing%20by%20R00TT3R%20:)%22);%3C/script%3E