[Full-disclosure] ACG-PTP 1.0.6 index.php persistent XSS
bug squash
bugsquashr at gmail.com
Fri Aug 22 16:23:20 BST 2008
###################################
ACG-PTP 1.0.6 index.php persistent XSS
###################################
Author: FatBack Mac and the BBQ gang
Link: http://www.discountedscripts.com/demos/acg-ptp/admin/index.php
Multiple persistent XSS in the admin panel -
Example:
Advertisment Packages
POST to "Category name" field
Credit/Debit Users:
POST to "Reason" Field
Add new FAQ entry:
POST to "FAQ question" and "FAQ answer"
etc....
GREETZ:
Tyler Trioxide, d00m3d! Chik3n hUnT3r 666, T4c0 b3LL cRu
############################################
PRAISE HEPHAESTUS *** PRAISE HEPHAESTUS
############################################
Full-Disclosure is hosted and sponsored by Secunia.