AOH :: HP Unsorted T :: B06-1946.HTM

Thyme 1.3 cross site scripting



Thyme 1.3 Cross Site Scripting
Thyme 1.3 Cross Site Scripting



#----------------------------------------------------------
#Aria-Security.net Advisory
#Discovered  by: O.U.T.L.A.W
#< www.Aria-security.net>
#Gr33t to: A.u.r.a  & R@1D3N & Smok3r
#-----------------------------------------------------------
=BB Software: Thyme 1.3
=BB Link: http://www.extrosoft.com/products/thyme/demo/index.php
=BB Attack method: Cross Site Scripting
=BB advisory:http://www.aria-security.net/portals/thyme

=BB Summary:
Thyme is a calendar system

=BBDescription
A Remote User Can Steal the sessioncookie by searing 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.