# Exploit Title: CLiki Cross Site Scripting
# Date: 8.02.2012
# Author: Sony
# Software Link: http://www.cliki.net
# Web Browser : Mozilla Firefox
# Blog : http://st2tea.blogspot.com
# PoC:
http://st2tea.blogspot.com/2012/02/cliki-cross-site-scripting.html
..................................................................

http://en.wikipedia.org/wiki/CLiki

Simple persistent xss.

Create New Page and put xss code and save this.

And you can see xss on the page.

Also we can see our xss on the "Recent Changes" Page.

http://www.cliki.net/Recent%20Changes

http://2.bp.blogspot.com/-bVPzmm6YAlY/TzKyybsoNMI/AAAAAAAAAcc/9GXowU-nf8w/s1600/12.JPG

..................................................................

InSecurity.Ro

Because we care, we're security aware!