CdeVision Cross Site Scripting Vulnerabilities

2011-08-17T00:00:00
ID SECURITYVULNS:DOC:26839
Type securityvulns
Reporter Securityvulns
Modified 2011-08-17T00:00:00

Description

########################## IRANIAN THE BEST HACKERS IN THE WORLD
##############

Cross Site Scripting Vulnerabilities

CdeVision

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.cdevision.com/

Persian Gulf 4 Ever!

Dork : "Site by cdeVision" "Tell a Friend"

Exploite:

www.victim.com/sendtoafriend.php?sendpage=[XSS]

www.victim.com/tellafriend.php?sendpage=[XSS]

www.victim.com/send.php?sendpage=[XSS]

www.victim.com/tellafriend.php?id=[XSS]

SpeCial TanX To : Dj7Xpl , Skote_Vahshat

######################### IRANIAN THE BEST HACKERS IN THE WORLD ##################