jetlib.sec » Bugtraq » Family Connections 2.7.2 Multiple XSS

Feeds

132963 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• January 16, 2012
• 

  Family Connections 2.7.2 Multiple XSS

  Posted: January 16th, 2012, 9:04am PST

  Tags:   

  Posted by tom on Jan 16

  # Exploit Title: Family Connections 2.7.2 Multiple XSS
  # Date: 01/14/12
  # Author: G13
  # CVE: 2012-0699
  # Software Link: https://sourceforge.net/projects/fam-connections/
  # Version: 2.7.2
  # Category: webapps (php)
  # Google dork: "powered by Family Connections"
  
  ##### Vulnerability #####
  
  Family Connections 2.7.2 has multiple XSS vulnerabilities. These
  exsist in the prayers and news sections.
  
  For familynews.php the 'post'...