AneCMS 1.3 Persistant XSS Vulnerability

ID 1337DAY-ID-15315
Type zdt
Reporter Zeus Penguin
Modified 2011-01-18T00:00:00


Exploit for php platform in category web applications

                                            # Exploit Title: AneCMS 1.3 Persistant XSS
# Date: 17.1.2011
# Author: Penguin
# Visit:
# Software Link:
# Version: 1.3
# Tested on: Linux
(I) Vulnerability
You can add blogpost comments that does not get filtered for HTML-Code.
Simply add an Comment with for example the Content <script>alert(1337);</script>
Your <script> code will get executed by every visitor who reads the comments!
(II) Bug Fix
There's no Bugfix :)

# [2018-02-09]  #