Coreye Posted January 21, 2008 Share Posted January 21, 2008 Hey guys, Let me know what you find. Link: http://www.wikiproxy.net Thanks, Corey Link to comment Share on other sites More sharing options...
agentsteal Posted January 21, 2008 Share Posted January 21, 2008 Array: http://www.wikiproxy.net/view.php?e[] Array: http://www.wikiproxy.net/view.php?t[] Array: http://www.wikiproxy.net/login.php?e[] Array: http://www.wikiproxy.net/login.php?t[] Array: http://www.wikiproxy.net/logout.php?e[] Array: http://www.wikiproxy.net/logout.php?t[] Cross Site Scripting: http://www.wikiproxy.net/view.php?e="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/view.php?t="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/login.php?e="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/login.php?t="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/logout.php?e="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/logout.php?t="><marquee><h1>vulnerable</marquee> Cross Site Scripting: There is Cross Site Scripting when you log in if the fields contain ">code. Cross Site Scripting: There is Cross Site Scripting when you create a ticket if the fields contain ">code. Link to comment Share on other sites More sharing options...
Coreye Posted January 21, 2008 Author Share Posted January 21, 2008 Array: http://www.wikiproxy.net/view.php?e[] Array: http://www.wikiproxy.net/view.php?t[] Array: http://www.wikiproxy.net/login.php?e[] Array: http://www.wikiproxy.net/login.php?t[] Array: http://www.wikiproxy.net/logout.php?e[] Array: http://www.wikiproxy.net/logout.php?t[] Cross Site Scripting: http://www.wikiproxy.net/view.php?e="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/view.php?t="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/login.php?e="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/login.php?t="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/logout.php?e="><marquee><h1>vulnerable</marquee> Cross Site Scripting: http://www.wikiproxy.net/logout.php?t="><marquee><h1>vulnerable</marquee> Cross Site Scripting: There is Cross Site Scripting when you log in if the fields contain ">code. Cross Site Scripting: There is Cross Site Scripting when you create a ticket if the fields contain ">code. All fixed. Thanks Link to comment Share on other sites More sharing options...
predator Posted January 21, 2008 Share Posted January 21, 2008 seen a few spelling errors. Nothing to major but it takes the professional look away from the app. Regards Mark Link to comment Share on other sites More sharing options...
Coreye Posted January 21, 2008 Author Share Posted January 21, 2008 seen a few spelling errors. Nothing to major but it takes the professional look away from the app. Regards Mark Hey, What are the spelling errors, besides 'uniqueue'? Thanks, Corey Link to comment Share on other sites More sharing options...
predator Posted January 25, 2008 Share Posted January 25, 2008 Sorry for not replying until now (been doing uni work). That was the only spelling error i saw. However, there are some grammer and punctuation errors throughout the system so you may want to re-think on how you word some things. Regarsd Mark Link to comment Share on other sites More sharing options...
Recommended Posts