[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

School CMS Persistent XSS Vulnerability

Author
VipVince
Risk
[
Security Risk High
]
0day-ID
0day-ID-19877
Category
web applications
Date add
04-12-2012
Platform
php
Title: SchoolCMS Persistant XSS.
#Date: 03/12/12
#Author: VipVince
#Vendor: www.poweritschools.com
#Google Dork: /old_core/cal/eventform.php
#Tested on: Windows.
 
This is a Persistant XSS used in the software by many schools.
 
About 225 results (0.21 seconds)
 
The vulnerability lies in the eventform.php file.
 
Entering your JavaScript into the form boxes and saving the event will store and trigger your persistent XSS script. Simplez. Have fun.

#  0day.today [2024-11-16]  #