http://badWebMasters.net
ben moeckel security research
-------------------------------------------------
badWebMasters security advisory #017
Cross Site Scripting @ PHP-Kit
Discovery date: 2003-09
Original advisory:
http://badwebmasters.net/advisory/017/ (text/html)
Legal Notice:
Copyright 2003 by Benjamin Klimmek (ben moeckel - badWebMasters)!
You may distribute it unmodified.
You may not modify it and distribute it or distribute parts of it
without giving credits and the URL where the original advisory can be
found!
This document may change without notice.
Author:
ben moeckel (http://distressed.de)
mailto: badwebmasters@online.de
Description:
PHPKIT is a Nuke-a-like portal written in PHP.
The contact-formular is prone to several cross site scripting
vulnerabilities.
Exploit:
http://phpkit.de/include.php
?path=contact.php&contact_email="><script>alert(123);</script>
Vendor:
I posted a notice on the board (http://www.phpkit.de) a while ago.
Feedback:
Comments, suggestions, updates, anything else?
-> mailto:badwebmasters@online.de
__________________________________________
badWebMasters - ben moeckel security research
http://badwebmasters.de http://badwebmasters.net
copyright 2k1-3 by Benjamin Klimmek / Germany
mailto:badwebmasters@online.de
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
{"id": "SECURITYVULNS:DOC:5338", "bulletinFamily": "software", "title": "[Full-Disclosure] [bWM#017] Cross-Site-Scripting @ PHPKIT", "description": "\r\nhttp://badWebMasters.net \r\nben moeckel security research \r\n------------------------------------------------- \r\n\r\nbadWebMasters security advisory #017 \r\nCross Site Scripting @ PHP-Kit \r\nDiscovery date: 2003-09 \r\n \r\nOriginal advisory:\r\nhttp://badwebmasters.net/advisory/017/ (text/html) \r\n \r\n \r\nLegal Notice:\r\nCopyright 2003 by Benjamin Klimmek (ben moeckel - badWebMasters)!\r\nYou may distribute it unmodified.\r\nYou may not modify it and distribute it or distribute parts of it\r\nwithout giving credits and the URL where the original advisory can be\r\nfound!\r\nThis document may change without notice. \r\n \r\n \r\nAuthor:\r\nben moeckel (http://distressed.de)\r\nmailto: badwebmasters@online.de \r\n \r\n \r\nDescription: \r\nPHPKIT is a Nuke-a-like portal written in PHP.\r\nThe contact-formular is prone to several cross site scripting\r\nvulnerabilities. \r\n \r\n \r\nExploit:\r\nhttp://phpkit.de/include.php\r\n ?path=contact.php&contact_email="><script>alert(123);</script>\r\n \r\n \r\nVendor: \r\nI posted a notice on the board (http://www.phpkit.de) a while ago.\r\n \r\n \r\nFeedback:\r\nComments, suggestions, updates, anything else?\r\n -> mailto:badwebmasters@online.de \r\n \r\n \r\n__________________________________________\r\n\r\nbadWebMasters - ben moeckel security research\r\nhttp://badwebmasters.de http://badwebmasters.net\r\ncopyright 2k1-3 by Benjamin Klimmek / Germany\r\nmailto:badwebmasters@online.de\r\n\r\n_______________________________________________\r\nFull-Disclosure - We believe in it.\r\nCharter: http://lists.netsys.com/full-disclosure-charter.html", "published": "2003-11-03T00:00:00", "modified": "2003-11-03T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:5338", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:08", "edition": 1, "viewCount": 52, "enchantments": {"score": {"value": 2.1, "vector": "NONE"}, "dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:3222"]}], "rev": 4}, "backreferences": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:3222"]}]}, "exploitation": null, "vulnersScore": 2.1}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645309180}}
[Full-Disclosure] [bWM#017] Cross-Site-Scripting @ PHPKIT