exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Plogger 1.0 RC1 Cross Site Scripting

Plogger 1.0 RC1 Cross Site Scripting
Posted Aug 29, 2012
Authored by HTTPCS

Plogger version 1.0 RC1 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
SHA-256 | b08982a7f4aad0a11297e5e0c3ee78eaa61fcc4a4f0ce5989b79efb7476686ef

Plogger 1.0 RC1 Cross Site Scripting

Change Mirror Download
HTTPCS Advisory : HTTPCS83
Product : Plogger
Version : 1.0 RC1
Date : 2012-08-28
Criticality level : Less Critical
Description : A vulnerability has been discovered in Plogger, which can be
exploited by malicious people to conduct cross-site scripting attacks. Input
passed via the 'sortby' parameter to '/index.php' is not properly sanitised
before being returned to the user. This can be exploited to execute arbitrary
HTML and script code in a user's browser session in context of an affected site.
Page : /index.php
Variables : level=album&sortby=[VulnHTTPCS]
Type : XSS
Method : GET
Solution :
References : https://www.httpcs.com/advisory/httpcs83
Credit : HTTPCS [Web Vulnerability Scanner]

Login or Register to add favorites

File Archive:

February 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Feb 1st
    11 Files
  • 2
    Feb 2nd
    9 Files
  • 3
    Feb 3rd
    5 Files
  • 4
    Feb 4th
    0 Files
  • 5
    Feb 5th
    0 Files
  • 6
    Feb 6th
    9 Files
  • 7
    Feb 7th
    0 Files
  • 8
    Feb 8th
    0 Files
  • 9
    Feb 9th
    0 Files
  • 10
    Feb 10th
    0 Files
  • 11
    Feb 11th
    0 Files
  • 12
    Feb 12th
    0 Files
  • 13
    Feb 13th
    0 Files
  • 14
    Feb 14th
    0 Files
  • 15
    Feb 15th
    0 Files
  • 16
    Feb 16th
    0 Files
  • 17
    Feb 17th
    0 Files
  • 18
    Feb 18th
    0 Files
  • 19
    Feb 19th
    0 Files
  • 20
    Feb 20th
    0 Files
  • 21
    Feb 21st
    0 Files
  • 22
    Feb 22nd
    0 Files
  • 23
    Feb 23rd
    0 Files
  • 24
    Feb 24th
    0 Files
  • 25
    Feb 25th
    0 Files
  • 26
    Feb 26th
    0 Files
  • 27
    Feb 27th
    0 Files
  • 28
    Feb 28th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close