CuteNews 1.4.1 <= Cross Site Scripting

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: CuteNews 1.4.1 <= Cross Site Scripting
From: sn4k3.23@xxxxxxxxx
Date: 18 Apr 2006 22:19:50 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

// CuteNews 1.4.1 <= Cross Site Scripting //

-----------------------------------------------------------------

[~] Advisory by: LoK-Crew ~ Snake_23

[-] Exploit: 
http://www.example.com/index.php?mod=editnews&action=editnews&id=1145397112&source=[XSS]

[-] Googledork: Powered by CuteNews 1.4.1 

[+] Greetz to: PHCN
[+] Visit: www.LoK-Crew.de.am

Prev by Date: Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk
Next by Date: SQL Injection in package SYS.DBMS_LOGMNR_SESSION
Previous by thread: [Symantec Security Advisory] LiveUpdate for Macintosh Local Privilege Escalation
Next by thread: Re: CuteNews 1.4.1 <= Cross Site Scripting
Index(es):
- Date
- Thread