Lucene search
K

yapigXSS.txt

🗓️ 28 Aug 2006 00:00:00Reported by KuonType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 24 Views

YaPiG thanks_comment.php Cross-Site Scripting Vulnerability in yapig 0.95b and disclosure detail

Code
`/*   
Kuon <Armorize Security Team>  
  
Kuon-[at]-Armorize.com  
  
YaPiG thanks_comment.php Cross-Site Scripting Vulnerability  
  
Contact : Kuon-[at]-Armorize.com  
  
Link : www.Armorize.com  
*/  
  
Armorize Technologies Security Advisory  
  
Advisory No: 20061001  
Date: 2006/08/25  
  
Affected Software:   
yapig 0.95b  
  
Vulnerability Description:   
Cross-Site Scripting Vulnerability  
  
Detection/Exploit:  
http://www.example.com/[PATH]/template/default/thanks_comment.php?D_REFRESH_URL=[XSS]  
  
Disclosure Timeline:  
2006/08/17  
  
Armorize Technologies provides next-generation source code analysis tools to help developers identify and remediate vulnerabilities in their web application source. CodeSecure™, Armorize’s premier source code analysis tool is available for analysis of PHP, JSP and ASP. Find out more at www.armorize.com .  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation