Confixx 3.1.2 <= Cross Site Scripting Vuln

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Confixx 3.1.2 <= Cross Site Scripting Vuln
From: sn4k3.23@xxxxxxxxx
Date: 10 Apr 2006 22:42:41 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

// Confixx 3.1.2 <= Cross Site Scripting Vuln //

-----------------------------------------------------------------

[~] Advistory by: LoK-Crew ~ Snake_23


[-] Exploit: http://www.victim.com/allgemein_transfer.php?monat=4&jahr=[XSS]

[-] Googledork: -

[+] Greetz to: Bluegeek and Team.Rootbox
[+] Visit: www.LoK-Crew.de.am

Prev by Date: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2
Next by Date: INDEXU <= 5.0.1 (theme_path)and (base_path) Remote File Inclusion Exploit
Previous by thread: [USN-269-1] xscreensaver vulnerability
Next by thread: INDEXU <= 5.0.1 (theme_path)and (base_path) Remote File Inclusion Exploit
Index(es):
- Date
- Thread