Lucene search
K

BACS Demo Cross Site Scripting

🗓️ 12 Jul 2011 00:00:00Reported by Karthik RType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 23 Views

BACS Demo persistent XSS vulnerabilities on admin panel and tags sectio

Code
`BACS DEMO persistent XSS vulnerabilties  
vendor: www.bacsdemo.com  
Author: Karthik R (3psil0nLambDa)  
Email: [email protected]  
My blog: epsilonlambda.co.cc  
Google dork: Copyright © 2009 Coupon codes  
  
Exploits:  
  
Persistent XSS vulnerability in the admin panel->static page->add new section. In html mode type the following string:  
  
"><iframe src="javascript:alert('XSS');"></iframe>  
  
Click update. Javascript alert box pops up \m/  
  
Persistent XSS vulnerability in admin panel->tags->manage tags and also in the add new tag field section. In the search box type in the following string.  
  
"><marquee><h1>Hacker</h1></marquee>  
  
The webpage is defaced with the following marquee on the screen.\m/  
  
-------------------------------------------------------------------------------------------  
Tribite to side^effects and love to taashu.  
  
-------------------------------------------------------------------------------------------  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation