Chipmunk Newsletter 2.0 Cross Site Scripting

dadf Title: Chipmunk Newsletter XSS Vulnerabilities Date: 01-19-2010 Author: b0telh0 Software Link: http://www.chipmunk-scripts.com/newsletter/newsletter.zip Version: 2.0 Tested on: Windows 7 Another XSS on Chipmunk Newsletter... Thanks to mrme who found the first flaw on it! ::...

Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40024/info Chipmunk Newsletter is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...

Chipmunk Newsletter XSRF

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Chipmunk Newsletter CSRF Vulnerabilities

Exploit for unknown platform in category web applications ======================================== Chipmunk Newsletter CSRF Vulnerabilities ======================================== ------------------------------------------------------------------------------------------------- Title: Chipmunk...

Chipmunk NewsLetter - Cross-Site Request Forgery

Chipmunk NewsLetter - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk Newsletter CSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk NewsLetter - Cross-Site Request Forgery

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Chipmunk NewsLetter - Persistent Cross-Site Scripting Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization:...

Chipmunk Newsletter Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ================================================ Chipmunk Newsletter Persistant XSS Vulnerability ================================================ Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your cookie'&submit=submit...