# Exploit Title: CLiki Cross Site Scripting # Date: 8.02.2012 # Author: Sony # Software Link: http://www.cliki.net # Web Browser : Mozilla Firefox # Blog : http://st2tea.blogspot.com # PoC: http://st2tea.blogspot.com/2012/02/cliki-cross-site-scripting.html .................................................................. http://en.wikipedia.org/wiki/CLiki Simple persistent xss. Create New Page and put xss code and save this. And you can see xss on the page. Also we can see our xss on the "Recent Changes" Page. http://www.cliki.net/Recent%20Changes http://2.bp.blogspot.com/-bVPzmm6YAlY/TzKyybsoNMI/AAAAAAAAAcc/9GXowU-nf8w/s1600/12.JPG .................................................................. InSecurity.Ro Because we care, we're security aware!