Exploit YaPiG 0.9x - 'Thanks_comment.php' Cross-Site Scripting

[Exploiter]

EDB-ID

28428

Проверка EDB

1. Пройдено

Автор

KUON

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-4421

Дата публикации

2006-10-13

source: https://www.securityfocus.com/bid/19709/info

Yapig is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. This may let an attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 0.95b; other versions may also be vulnerable.

http://www.example.com/[PATH]/template/default/thanks_comment.php?D_REFRESH_URL=[XSS]