Информационная безопасность
[RU] switch to English


Дополнительная информация

  Cводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)

  Aurora WebOPAC SQL Injection - Security Advisory - SOS-12-004

  Brute Force и XSS уязвимости в Webglimpse

  Vulnerability Description: XSS-(CROSS SITE SCRIPTING VULNERABILITIES) (ZAPHOD BREEBLEBROX'S BLOCKER A.K.A. ZB BLOCK)

  phpMyVisites 2.4_XSS

From:Thomas Richards <g13net_(at)_gmail.com>
Date:19 марта 2012 г.
Subject:Kongreg8 1.7.3 Mutiple XSS

# Exploit Title: Kongreg8 1.7.3 Mutiple XSS
# Date: 02/24/12
# Author: G13
# Software Link: https://sourceforge.net/projects/kongreg8/
# Version: 1.7.3
# Category: webapps (php)
#

##### Vulnerability #####

Kongreg8 1.7.3 has multiple XSS vulnerabilites.  These vulnerabilities
are in the Add Member and Add Group functions.  These are presistent
XSS vulnerabilities.

The script command can be added right on the page; there is no client
or server side validation on these fields.

##### Vendor Notification #####

02/19/12 - Vendor Notified
02/24/12 - Disclosure

##### Affected Variables #####

Add Member:

surname=[XSS]
firstname=[XSS]

Add Group:

groupdescription=[XSS]
groupname=[XSS]

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород