Ez Album suffers from a persistent cross site scripting vulnerability.
cf5d30402aeb75db8fad043804ac0235/*
Ez Album (XSS) Script Injection Vulnerability
Discovered by : MizoZ
Contact : mizozx@gmail.com
Date : July 29 2009
Greetings : Moudi , Zuka, All friends
*/
We can inject HTML Scripts from the add comment , not in the comment but in
the name input .
exemple : http://www.ajaxez.com/album/index.php?action=view&id=1242082839 #
you can see an alert of 1
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!