EUVD-2021-1269

Malware in sbrugna...

w3msql-xss.txt

A reflected xss flaw exists in the w3-msql error page. google dork : "W3-mSQL Error! - Can't stat script file /" Just insert a script from the start of / like if u get a URL like:- http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html and the error page output as :- W3-mSQL Error! - Can't stat...