Silentum LoginSys version 1.0.0 suffers from a cross site scripting vulnerability.
7e068f4cc7e36ca6e6365c28cafd5266+===============================================================+
+ Silentum LoginSys v1.0.0 (XSS) Cross-Site Scripting +
+===============================================================+
Author(s): Maximiliano Soler.
Web: www.maximilianosoler.com.ar
Product: Silentum LoginSys v1.0.0
Description: Silentum LoginSys is terrific if you're looking for a simple,
easy-to-install login system for your site.
Web: http://hypersilence.net (HyperSilence)
Versions: 1.0.0
Date: 06/09/2008
GOOGLE DORKS:
------------
[+] inurl:"login.php" + intext:"Stay logged in for:" + intext:"User Name:"
EXPLOIT:
--------
For example...after the variable "message"
http://domain/login.php?message=[XSS]
+===============================================================+
+ Silentum LoginSys v1.0.0 (XSS) Cross-Site Scripting +
+===============================================================+
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!